Overview

overview

10

Static

static

3

943dd2309d...cs.exe

windows7-x64

10

943dd2309d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    943dd2309d23460b802919b6eedf06e0_NeikiAnalytics.exe

  • Size

    200KB

  • Sample

    240604-mh2eysdc5x

  • MD5

    943dd2309d23460b802919b6eedf06e0

  • SHA1

    5a0acc98887c9b374d1051789e430ccdc8cafa01

  • SHA256

    0a5f650d08391906d4f14546cd3f310d74dbf95d76d8e84c7c9b978d34949af7

  • SHA512

    ef004a1fb7e910c9ca9c214cfc288a56329a93e29188dd46079129918a64c04dfbd05661746d7bee484ab38f6a575a4697978a6f3d36d12365a19dfd14a19023

  • SSDEEP

    3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uBL9iw:7vEN2U+T6i5LirrllHy4HUcMQY6C9iw

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      943dd2309d23460b802919b6eedf06e0_NeikiAnalytics.exe

    • Size

      200KB

    • MD5

      943dd2309d23460b802919b6eedf06e0

    • SHA1

      5a0acc98887c9b374d1051789e430ccdc8cafa01

    • SHA256

      0a5f650d08391906d4f14546cd3f310d74dbf95d76d8e84c7c9b978d34949af7

    • SHA512

      ef004a1fb7e910c9ca9c214cfc288a56329a93e29188dd46079129918a64c04dfbd05661746d7bee484ab38f6a575a4697978a6f3d36d12365a19dfd14a19023

    • SSDEEP

      3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uBL9iw:7vEN2U+T6i5LirrllHy4HUcMQY6C9iw

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks