Overview

overview

10

Static

static

3

0d33021177...cs.exe

windows7-x64

10

0d33021177...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d33021177166513f50715fcda6a7da0_NeikiAnalytics.exe

  • Size

    200KB

  • Sample

    240603-2p86psbh4x

  • MD5

    0d33021177166513f50715fcda6a7da0

  • SHA1

    b459d5005d1ce67fec015a13eba1233403966651

  • SHA256

    2c2f26c6095f448dff8efebba4d4ee31c12c6c8d0fc63f9de1bb6a09f53aaf99

  • SHA512

    486a3b114b10732a7e10e6c9419631f98ff5e26bce0c8ec0ed7f6ff4d54b183246e926dcee231720c2fd39e32152ad7cbb6c8b03cb6507590f90c4fa179eb225

  • SSDEEP

    3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uBL9iG:7vEN2U+T6i5LirrllHy4HUcMQY6C9iG

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0d33021177166513f50715fcda6a7da0_NeikiAnalytics.exe

    • Size

      200KB

    • MD5

      0d33021177166513f50715fcda6a7da0

    • SHA1

      b459d5005d1ce67fec015a13eba1233403966651

    • SHA256

      2c2f26c6095f448dff8efebba4d4ee31c12c6c8d0fc63f9de1bb6a09f53aaf99

    • SHA512

      486a3b114b10732a7e10e6c9419631f98ff5e26bce0c8ec0ed7f6ff4d54b183246e926dcee231720c2fd39e32152ad7cbb6c8b03cb6507590f90c4fa179eb225

    • SSDEEP

      3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uBL9iG:7vEN2U+T6i5LirrllHy4HUcMQY6C9iG

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks