Overview

overview

8

Static

static

7

9b97af6d1d...cs.exe

windows7-x64

8

9b97af6d1d...cs.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9b97af6d1df90612ff5261af4eb0cb70_NeikiAnalytics.exe

  • Size

    560KB

  • Sample

    240603-e41rjscg28

  • MD5

    9b97af6d1df90612ff5261af4eb0cb70

  • SHA1

    04fb6a138aefb813483e902cff23562fca166c38

  • SHA256

    29afa91b2b8db08feccaaab231c2406c732a7d1c033c48dd7cdcba2d760f57b4

  • SHA512

    0ed3e3498866bb68d61f20fb4cb7258a0180a49eddf0fd724dc0af3389ffd077573f601a374ff66eeda34ec51e07400be475e7ad42526026fbd7626f91513d06

  • SSDEEP

    12288:7tKe6Zv23YLVFhBsC8iFHs+hsuQXIQRUPgdVKk:v6Zv2ivhBVnFvh5Q44UPgdVKk

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      9b97af6d1df90612ff5261af4eb0cb70_NeikiAnalytics.exe

    • Size

      560KB

    • MD5

      9b97af6d1df90612ff5261af4eb0cb70

    • SHA1

      04fb6a138aefb813483e902cff23562fca166c38

    • SHA256

      29afa91b2b8db08feccaaab231c2406c732a7d1c033c48dd7cdcba2d760f57b4

    • SHA512

      0ed3e3498866bb68d61f20fb4cb7258a0180a49eddf0fd724dc0af3389ffd077573f601a374ff66eeda34ec51e07400be475e7ad42526026fbd7626f91513d06

    • SSDEEP

      12288:7tKe6Zv23YLVFhBsC8iFHs+hsuQXIQRUPgdVKk:v6Zv2ivhBVnFvh5Q44UPgdVKk

    Score
    8/10
    persistenceupx

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks