Overview

overview

10

Static

static

3

19e0d824e4...cs.exe

windows7-x64

10

19e0d824e4...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    19e0d824e47ffef37bffe32143d8b280_NeikiAnalytics.exe

  • Size

    296KB

  • Sample

    240604-3ygy9aff81

  • MD5

    19e0d824e47ffef37bffe32143d8b280

  • SHA1

    1c8e19e6f56c9bcc290cdf20d8c8f65764de706f

  • SHA256

    0a8c2b3c6f7286d63f94ab6766669952093625e6e8748103070d9250f3ecf03e

  • SHA512

    7d704fd2c87d7b209356d2217282f8c4479dffbd0e924624262ad7b1504a11f74669ed558c608f4d00f480feb8028b8798b8b15edd847eb2472ff40450a30604

  • SSDEEP

    3072:nQ0d0xhQPiYl4uQY7ARA1+6NhZ6P0c9fpxg6pg:Q0ChQqcQYVNPKG6g

Score
10/10
persistence

Malware Config

Targets

    • Target

      19e0d824e47ffef37bffe32143d8b280_NeikiAnalytics.exe

    • Size

      296KB

    • MD5

      19e0d824e47ffef37bffe32143d8b280

    • SHA1

      1c8e19e6f56c9bcc290cdf20d8c8f65764de706f

    • SHA256

      0a8c2b3c6f7286d63f94ab6766669952093625e6e8748103070d9250f3ecf03e

    • SHA512

      7d704fd2c87d7b209356d2217282f8c4479dffbd0e924624262ad7b1504a11f74669ed558c608f4d00f480feb8028b8798b8b15edd847eb2472ff40450a30604

    • SSDEEP

      3072:nQ0d0xhQPiYl4uQY7ARA1+6NhZ6P0c9fpxg6pg:Q0ChQqcQYVNPKG6g

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks