Overview

overview

10

Static

static

3

456f113e67...cs.exe

windows7-x64

10

456f113e67...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    456f113e67dc37cf84497a9f4ddccd20_NeikiAnalytics.exe

  • Size

    96KB

  • Sample

    240528-qjav6sfh89

  • MD5

    456f113e67dc37cf84497a9f4ddccd20

  • SHA1

    01496a1e88aec04272c5c6a6cb5bab167f347850

  • SHA256

    e7965932e7fe056a2b65449c2998d113945fadd14de43a578d7d394b2885ec93

  • SHA512

    b68c61e98b205323770e9b629e8ba655eac0ce3cfa573add4da198c68870c006fb67a6d8a054537d4f13134b1ba9ae6ffeeaab986baf3f280852b4fdb5a43ef0

  • SSDEEP

    768:7qPZI+4R8DppjbOWrLR1LQevS0GR/SC5x/ze/lQlUogSYiOCN7IP8AeupGQBTobJ:7ql4SnWWrL7Qe25xjlU47I0my3i6EZ0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      456f113e67dc37cf84497a9f4ddccd20_NeikiAnalytics.exe

    • Size

      96KB

    • MD5

      456f113e67dc37cf84497a9f4ddccd20

    • SHA1

      01496a1e88aec04272c5c6a6cb5bab167f347850

    • SHA256

      e7965932e7fe056a2b65449c2998d113945fadd14de43a578d7d394b2885ec93

    • SHA512

      b68c61e98b205323770e9b629e8ba655eac0ce3cfa573add4da198c68870c006fb67a6d8a054537d4f13134b1ba9ae6ffeeaab986baf3f280852b4fdb5a43ef0

    • SSDEEP

      768:7qPZI+4R8DppjbOWrLR1LQevS0GR/SC5x/ze/lQlUogSYiOCN7IP8AeupGQBTobJ:7ql4SnWWrL7Qe25xjlU47I0my3i6EZ0

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks