Overview

overview

10

Static

static

10

0903495c29...cs.exe

windows7-x64

10

0903495c29...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0903495c29ca90404ba92b8051a59e80_NeikiAnalytics.exe

  • Size

    337KB

  • Sample

    240525-w9bs2sdg3y

  • MD5

    0903495c29ca90404ba92b8051a59e80

  • SHA1

    a7d2fa486f28e5aa980d995778229117159156af

  • SHA256

    744ba717e007df905d82e51f1b860c102c4cb3e12731372a1703d702bc033ac5

  • SHA512

    7177dbd757a844f4b1f664a25e35dde3c868bc67c370f067bfae7b6500cfbb4daee4e9fdac70b9b3ddf088f7510db7bf7f716a4210fec1f84b7e37317917b450

  • SSDEEP

    3072:XYYVIocnyrgFOAO9gYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:X3Vllgg91+fIyG5jZkCwi8r

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      0903495c29ca90404ba92b8051a59e80_NeikiAnalytics.exe

    • Size

      337KB

    • MD5

      0903495c29ca90404ba92b8051a59e80

    • SHA1

      a7d2fa486f28e5aa980d995778229117159156af

    • SHA256

      744ba717e007df905d82e51f1b860c102c4cb3e12731372a1703d702bc033ac5

    • SHA512

      7177dbd757a844f4b1f664a25e35dde3c868bc67c370f067bfae7b6500cfbb4daee4e9fdac70b9b3ddf088f7510db7bf7f716a4210fec1f84b7e37317917b450

    • SSDEEP

      3072:XYYVIocnyrgFOAO9gYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:X3Vllgg91+fIyG5jZkCwi8r

    Score
    10/10
    njratpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks