Overview

overview

10

Static

static

10

051571fe6a...cs.exe

windows7-x64

1

051571fe6a...cs.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    051571fe6a02149a3a3aa2bab6703c00_NeikiAnalytics.exe

  • Size

    172KB

  • Sample

    240526-1m318sea67

  • MD5

    051571fe6a02149a3a3aa2bab6703c00

  • SHA1

    f082351d92d3d8fd224634afd908ed4d107013ff

  • SHA256

    d8ef5ae19d759524d9e72a70de36e41c64e3ad465f94c6d39c7e2645c3363bd1

  • SHA512

    d1c43f90e9139ae9fef290fafac11e5b19b51e463ee422ee48bd54b2e5f4ce41068af77cd3d30bb05a016d2925b8dd1cf10fa25e59dca12c727ee786bfb2e03f

  • SSDEEP

    3072:RqaJm74qpXtmOnJjBawT253uaxfKfVvXgDOL3DzpPL0F0JCb3O3Cb3hHSHUEcC8p:psfdPnth

Score
10/10
redlinemicrosoftphishing

Malware Config

Extracted

Family

redline

C2

82.115.223.46:57672

Attributes
  • auth_value

    25566e143199c0836b0e51542c425f6e

Targets

    • Target

      051571fe6a02149a3a3aa2bab6703c00_NeikiAnalytics.exe

    • Size

      172KB

    • MD5

      051571fe6a02149a3a3aa2bab6703c00

    • SHA1

      f082351d92d3d8fd224634afd908ed4d107013ff

    • SHA256

      d8ef5ae19d759524d9e72a70de36e41c64e3ad465f94c6d39c7e2645c3363bd1

    • SHA512

      d1c43f90e9139ae9fef290fafac11e5b19b51e463ee422ee48bd54b2e5f4ce41068af77cd3d30bb05a016d2925b8dd1cf10fa25e59dca12c727ee786bfb2e03f

    • SSDEEP

      3072:RqaJm74qpXtmOnJjBawT253uaxfKfVvXgDOL3DzpPL0F0JCb3O3Cb3hHSHUEcC8p:psfdPnth

    Score
    5/10
    microsoftphishing
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks