Overview

overview

7

Static

static

3

40761e0458...cs.exe

windows7-x64

7

40761e0458...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    40761e04586d7d32c37733b3b9e060d0_NeikiAnalytics.exe

  • Size

    41KB

  • Sample

    240529-feyrbsbh24

  • MD5

    40761e04586d7d32c37733b3b9e060d0

  • SHA1

    e54913f5c548fd3c99e2377bb9b335492bbde8e7

  • SHA256

    3c41ee52bcda16f0fa4b469b6a19430e747b6b4b83999c57d500a10c9a7127d2

  • SHA512

    3004e9c2c4584cb9e907e1383c8c11c656b5022fa17db7964dc735c1c7b370c5039d26210f8f87d676c688a8065cbaa16ceb685706a2686b165cc27252de81a8

  • SSDEEP

    768:seMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i09Cy:sq5VwWDjDkdTRqHFOn8tIbbeYiuZIFSz

Score
7/10
persistence

Malware Config

Targets

    • Target

      40761e04586d7d32c37733b3b9e060d0_NeikiAnalytics.exe

    • Size

      41KB

    • MD5

      40761e04586d7d32c37733b3b9e060d0

    • SHA1

      e54913f5c548fd3c99e2377bb9b335492bbde8e7

    • SHA256

      3c41ee52bcda16f0fa4b469b6a19430e747b6b4b83999c57d500a10c9a7127d2

    • SHA512

      3004e9c2c4584cb9e907e1383c8c11c656b5022fa17db7964dc735c1c7b370c5039d26210f8f87d676c688a8065cbaa16ceb685706a2686b165cc27252de81a8

    • SSDEEP

      768:seMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i09Cy:sq5VwWDjDkdTRqHFOn8tIbbeYiuZIFSz

    Score
    7/10
    persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks