Overview

overview

8

Static

static

3

53f21c7887...cs.exe

windows7-x64

8

53f21c7887...cs.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    53f21c788709bc3f4df218ae7d338fb0_NeikiAnalytics.exe

  • Size

    5KB

  • Sample

    240526-c35m1acf36

  • MD5

    53f21c788709bc3f4df218ae7d338fb0

  • SHA1

    22999ae0e7d79b7708715252ac220c2e1ecc2b9b

  • SHA256

    3f96dc6766dd2e3b8f162cc23b630c707fdcad4e85f4b23f861e256ececd67e7

  • SHA512

    cb674d1275ba29df5f925ef4dc7316ea3476663ae3323b3368952607228dd26fd068eae1a5ebf2bc5ef3c4245251afb1cf4a05cf31d677a97d02bbea92fdbda0

  • SSDEEP

    48:qaD/L9AmnRt/G9Ht2ApBX7KZlejjuut71rsHB/VnC/RAxUl2CS70ALNx:NCCXQt2MBLsmaut7uHnnwR2Ul2ClAhx

Score
8/10
persistence

Malware Config

Targets

    • Target

      53f21c788709bc3f4df218ae7d338fb0_NeikiAnalytics.exe

    • Size

      5KB

    • MD5

      53f21c788709bc3f4df218ae7d338fb0

    • SHA1

      22999ae0e7d79b7708715252ac220c2e1ecc2b9b

    • SHA256

      3f96dc6766dd2e3b8f162cc23b630c707fdcad4e85f4b23f861e256ececd67e7

    • SHA512

      cb674d1275ba29df5f925ef4dc7316ea3476663ae3323b3368952607228dd26fd068eae1a5ebf2bc5ef3c4245251afb1cf4a05cf31d677a97d02bbea92fdbda0

    • SSDEEP

      48:qaD/L9AmnRt/G9Ht2ApBX7KZlejjuut71rsHB/VnC/RAxUl2CS70ALNx:NCCXQt2MBLsmaut7uHnnwR2Ul2ClAhx

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks