Overview

overview

10

Static

static

3

055be1d6e2...cs.exe

windows7-x64

10

055be1d6e2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    055be1d6e2b2880e22ed327090a40050_NeikiAnalytics.exe

  • Size

    34KB

  • Sample

    240526-1qkztseb55

  • MD5

    055be1d6e2b2880e22ed327090a40050

  • SHA1

    88543df1bc86a3f61c8c8df255116329ea410bfe

  • SHA256

    a2c943acb882e17936bc26e9b499dbba748b4d567b539e5b0ff21478b4f25115

  • SHA512

    5c0431541d5ebc7d211404343579625f808214d6c32bd9f37dce1ec88f8e7cca38f89403ccf27d617321a93cd0a643a2af7d0870f7972f256df9d081b235ae68

  • SSDEEP

    384:W6Lz0OyPaGPbG8FecNrgzbUFPlfRNefMfNq8U+68KWRzpeancfKykJIyfgS9/V+I:W6Lo1RPbPFHRgzwFPlf/efMTtnyI8W

Score
10/10
ginkpersistenceworm

Malware Config

Targets

    • Target

      055be1d6e2b2880e22ed327090a40050_NeikiAnalytics.exe

    • Size

      34KB

    • MD5

      055be1d6e2b2880e22ed327090a40050

    • SHA1

      88543df1bc86a3f61c8c8df255116329ea410bfe

    • SHA256

      a2c943acb882e17936bc26e9b499dbba748b4d567b539e5b0ff21478b4f25115

    • SHA512

      5c0431541d5ebc7d211404343579625f808214d6c32bd9f37dce1ec88f8e7cca38f89403ccf27d617321a93cd0a643a2af7d0870f7972f256df9d081b235ae68

    • SSDEEP

      384:W6Lz0OyPaGPbG8FecNrgzbUFPlfRNefMfNq8U+68KWRzpeancfKykJIyfgS9/V+I:W6Lo1RPbPFHRgzwFPlf/efMTtnyI8W

    Score
    10/10
    ginkpersistenceworm
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks