Overview

overview

10

Static

static

3

22ed2457fd...cs.exe

windows7-x64

10

22ed2457fd...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    22ed2457fdc794abfb08fa92b19606d0_NeikiAnalytics.exe

  • Size

    4.1MB

  • Sample

    240527-hbxqzabb6s

  • MD5

    22ed2457fdc794abfb08fa92b19606d0

  • SHA1

    254ba2c1e5d176e4b7d8f511407d696ac6fd1a7d

  • SHA256

    f30f2535f291ab5f472136803ff3c04f6553eb9fe252a551450ea3f7c147dff4

  • SHA512

    a447bf1811236c3de601df3cd4470948772be7f369a86868682d6b159cbd85bcc095db8b47e5932809349b8fcba2c3bee53ba006bccf87ac7763adc51b9efb46

  • SSDEEP

    98304:JIFT3aZ0m6b0GL3vdHLu5UMEyz4IL+ox9frfixLdRT:J03aZ030MdecaCqNOx5RT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      22ed2457fdc794abfb08fa92b19606d0_NeikiAnalytics.exe

    • Size

      4.1MB

    • MD5

      22ed2457fdc794abfb08fa92b19606d0

    • SHA1

      254ba2c1e5d176e4b7d8f511407d696ac6fd1a7d

    • SHA256

      f30f2535f291ab5f472136803ff3c04f6553eb9fe252a551450ea3f7c147dff4

    • SHA512

      a447bf1811236c3de601df3cd4470948772be7f369a86868682d6b159cbd85bcc095db8b47e5932809349b8fcba2c3bee53ba006bccf87ac7763adc51b9efb46

    • SSDEEP

      98304:JIFT3aZ0m6b0GL3vdHLu5UMEyz4IL+ox9frfixLdRT:J03aZ030MdecaCqNOx5RT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks