Overview

overview

10

Static

static

3

31ba7c41a6...cs.exe

windows7-x64

10

31ba7c41a6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31ba7c41a617fa7f4f879d9ebf476120_NeikiAnalytics.exe

  • Size

    53KB

  • Sample

    240602-efsq2aaa8y

  • MD5

    31ba7c41a617fa7f4f879d9ebf476120

  • SHA1

    f768026b45efdf31d7414bd48e019a7a226f431c

  • SHA256

    d78384d543654bafe86cbbe43356fd2f49872b0a8a042398e92d6f72ad87f479

  • SHA512

    168785181cad069d28ac10b1e6704d69e50ff92af92b36ee3467fbd7c790cb2115bc592fab3c16e2477125de76cd2072b5b371583d13244cec7d861b42eedfb4

  • SSDEEP

    1536:vNcg8r8Q+Xg7Zsf7Kp3StjEMjmLM3ztDJWZsXy4JzxPM0:NXg2fJJjmLM3zRJWZsXy4Jd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      31ba7c41a617fa7f4f879d9ebf476120_NeikiAnalytics.exe

    • Size

      53KB

    • MD5

      31ba7c41a617fa7f4f879d9ebf476120

    • SHA1

      f768026b45efdf31d7414bd48e019a7a226f431c

    • SHA256

      d78384d543654bafe86cbbe43356fd2f49872b0a8a042398e92d6f72ad87f479

    • SHA512

      168785181cad069d28ac10b1e6704d69e50ff92af92b36ee3467fbd7c790cb2115bc592fab3c16e2477125de76cd2072b5b371583d13244cec7d861b42eedfb4

    • SSDEEP

      1536:vNcg8r8Q+Xg7Zsf7Kp3StjEMjmLM3ztDJWZsXy4JzxPM0:NXg2fJJjmLM3zRJWZsXy4Jd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks