Overview

overview

10

Static

static

1

657557b9fa...cs.exe

windows7-x64

10

657557b9fa...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    657557b9fa0e98499b4f5ec103102300_NeikiAnalytics.exe

  • Size

    209KB

  • Sample

    240526-e13fzaeh2w

  • MD5

    657557b9fa0e98499b4f5ec103102300

  • SHA1

    bc8a79f628d137c7c36a46c41ed057e7d530be8d

  • SHA256

    d385e990e80adb62f3580d183db78829e95b9adc4a64fda799c835284ee32bcc

  • SHA512

    c4f448bae115a89c065e5179a7edc93b8a819163ede0e032a18dbb8df999cd3d7e0729703a4adee158dba3e4e712f7723e64b735ec8d6d6bfe4cd80a53b98b9e

  • SSDEEP

    3072:IQcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:IQh9tVRm2kh34hdeCkcG7DEALLlnN

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      657557b9fa0e98499b4f5ec103102300_NeikiAnalytics.exe

    • Size

      209KB

    • MD5

      657557b9fa0e98499b4f5ec103102300

    • SHA1

      bc8a79f628d137c7c36a46c41ed057e7d530be8d

    • SHA256

      d385e990e80adb62f3580d183db78829e95b9adc4a64fda799c835284ee32bcc

    • SHA512

      c4f448bae115a89c065e5179a7edc93b8a819163ede0e032a18dbb8df999cd3d7e0729703a4adee158dba3e4e712f7723e64b735ec8d6d6bfe4cd80a53b98b9e

    • SSDEEP

      3072:IQcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:IQh9tVRm2kh34hdeCkcG7DEALLlnN

    Score
    10/10
    persistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks