Overview

overview

10

Static

static

3

85fc87a757...cs.exe

windows7-x64

10

85fc87a757...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    85fc87a75750b26bc4da4c53ff316810_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240601-anvs5sah5t

  • MD5

    85fc87a75750b26bc4da4c53ff316810

  • SHA1

    5e31011b135ceb0a026c28deb74804a05a23af29

  • SHA256

    865170810626fcebcff12b15fa8ea199916a586de17a5c1125f2ccf07786b954

  • SHA512

    24e23284070bfc3a34eb49c5ff32044b1e6a663e9cdb382034c68f92950de8d9b74e568ecf987bd090a39d6063dd73cc28424601777c701f5141dcf078c960a4

  • SSDEEP

    24576:l9cdOqX1uuMliQzd4mNy9Sh5hJgpiwVQLJaOSZ4LehoZza9gNWmAO5ehlMR:l9UX1uBx4mYo83vOSeyeaKrj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      85fc87a75750b26bc4da4c53ff316810_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      85fc87a75750b26bc4da4c53ff316810

    • SHA1

      5e31011b135ceb0a026c28deb74804a05a23af29

    • SHA256

      865170810626fcebcff12b15fa8ea199916a586de17a5c1125f2ccf07786b954

    • SHA512

      24e23284070bfc3a34eb49c5ff32044b1e6a663e9cdb382034c68f92950de8d9b74e568ecf987bd090a39d6063dd73cc28424601777c701f5141dcf078c960a4

    • SSDEEP

      24576:l9cdOqX1uuMliQzd4mNy9Sh5hJgpiwVQLJaOSZ4LehoZza9gNWmAO5ehlMR:l9UX1uBx4mYo83vOSeyeaKrj

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks