Overview

overview

10

Static

static

3

5b88981069...cs.exe

windows7-x64

10

5b88981069...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b889810696b29549746de5218262990_NeikiAnalytics.exe

  • Size

    34KB

  • Sample

    240526-d1rh2adc2y

  • MD5

    5b889810696b29549746de5218262990

  • SHA1

    86c525f9efe9c9fa123bf45cd7513f3416cae72a

  • SHA256

    c4c3fe47bf851a24088af9a1a37bd6809fb354314bcbbb9ec61e95d6d2c9bdfa

  • SHA512

    74d76e2d8ae0da3888aff4ee9b5ae8dc93de2d23b2bba7a5ea7dd2821587ffacdd941b579a1857c8e06a54e7833e8f5b7a22c532c20f88d9753d25d7e33debe3

  • SSDEEP

    384:H6Lz0OyPaGPbG8FecNrgzbUFPlfRNefMfNq8UhQKWRzpeancfKykJIyfgS9/V+iC:H6Lo1RPbPFHRgzwFPlf/efMTuCI8W

Score
10/10
ginkpersistenceworm

Malware Config

Targets

    • Target

      5b889810696b29549746de5218262990_NeikiAnalytics.exe

    • Size

      34KB

    • MD5

      5b889810696b29549746de5218262990

    • SHA1

      86c525f9efe9c9fa123bf45cd7513f3416cae72a

    • SHA256

      c4c3fe47bf851a24088af9a1a37bd6809fb354314bcbbb9ec61e95d6d2c9bdfa

    • SHA512

      74d76e2d8ae0da3888aff4ee9b5ae8dc93de2d23b2bba7a5ea7dd2821587ffacdd941b579a1857c8e06a54e7833e8f5b7a22c532c20f88d9753d25d7e33debe3

    • SSDEEP

      384:H6Lz0OyPaGPbG8FecNrgzbUFPlfRNefMfNq8UhQKWRzpeancfKykJIyfgS9/V+iC:H6Lo1RPbPFHRgzwFPlf/efMTuCI8W

    Score
    10/10
    ginkpersistenceworm
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks