Overview

overview

10

Static

static

3

ef532c7814...cs.exe

windows7-x64

10

ef532c7814...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef532c781404252f3cf97590c18dc000_NeikiAnalytics.exe

  • Size

    53KB

  • Sample

    240530-ljfzzaeb35

  • MD5

    ef532c781404252f3cf97590c18dc000

  • SHA1

    d53433c233182dbcbaeae3bccd7fc99cd026d3f3

  • SHA256

    98258de69259c7602ac27b8bd730e0d4d54384cb3ef9f324eb210ea832ecbbae

  • SHA512

    ccf50236e8fb6f4e8c7879a118c20b1fa8d57dd05a7dd3b784188fef39bd0dd649c1ab950304a2859b7d183da8702f8e42e754fc879d52b123a5c20fec396524

  • SSDEEP

    1536:vN8g8r8QNxXNh18r7Kp3StjEMjmLM3ztDJWZsXy4JzxPMk:8XNh6rJJjmLM3zRJWZsXy4JN

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ef532c781404252f3cf97590c18dc000_NeikiAnalytics.exe

    • Size

      53KB

    • MD5

      ef532c781404252f3cf97590c18dc000

    • SHA1

      d53433c233182dbcbaeae3bccd7fc99cd026d3f3

    • SHA256

      98258de69259c7602ac27b8bd730e0d4d54384cb3ef9f324eb210ea832ecbbae

    • SHA512

      ccf50236e8fb6f4e8c7879a118c20b1fa8d57dd05a7dd3b784188fef39bd0dd649c1ab950304a2859b7d183da8702f8e42e754fc879d52b123a5c20fec396524

    • SSDEEP

      1536:vN8g8r8QNxXNh18r7Kp3StjEMjmLM3ztDJWZsXy4JzxPMk:8XNh6rJJjmLM3zRJWZsXy4JN

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks