Overview

overview

10

Static

static

3

119c92e977...cs.exe

windows7-x64

10

119c92e977...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    119c92e97725fdbd6c6be20d47478a60_NeikiAnalytics.exe

  • Size

    2.6MB

  • Sample

    240603-3jce8adb5t

  • MD5

    119c92e97725fdbd6c6be20d47478a60

  • SHA1

    c56648597ce50e8f0a1ad964eff5c28817bf382f

  • SHA256

    c24b1008da7ae4a2f4fb89466f3e55d092d6f666aeb6dea12ff147bbd28c58f1

  • SHA512

    4232bbc8f6b68ff949590b6e57e52fe3f94a87f3ea6bb9debc1d80e27431a79757df84973f6864998938af8f7572f368db80d9fa6478facfad82453e52c222f1

  • SSDEEP

    49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/z:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/z

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      119c92e97725fdbd6c6be20d47478a60_NeikiAnalytics.exe

    • Size

      2.6MB

    • MD5

      119c92e97725fdbd6c6be20d47478a60

    • SHA1

      c56648597ce50e8f0a1ad964eff5c28817bf382f

    • SHA256

      c24b1008da7ae4a2f4fb89466f3e55d092d6f666aeb6dea12ff147bbd28c58f1

    • SHA512

      4232bbc8f6b68ff949590b6e57e52fe3f94a87f3ea6bb9debc1d80e27431a79757df84973f6864998938af8f7572f368db80d9fa6478facfad82453e52c222f1

    • SSDEEP

      49152:TeS12nRc6C5CEAHD26ICQVt1ULUQRP6a6YPkCLJ37xbIjNyX5Hxzl/z:6S+c6ZEmqCMtmoQRP6aZtnsNq9l/z

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks