Overview

overview

7

Static

static

7

b71d3aaf6e...cs.exe

windows7-x64

7

b71d3aaf6e...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b71d3aaf6efe9f9afd524ab1434d1120_NeikiAnalytics.exe

  • Size

    134KB

  • Sample

    240604-mwxc6adg6y

  • MD5

    b71d3aaf6efe9f9afd524ab1434d1120

  • SHA1

    0a94f4dc37bd9024de373c149e8ff2e84cf402c9

  • SHA256

    ebec7978986c763dc0bebebf7337d14efc4829b55dbf910a565e996e267502b5

  • SHA512

    13506b6fd1c95e12215664e81a4f8e8c34085a18a04a6c6d1b0407ef842c655704199236c98ff9e92de01bcb0d2a3d3b25395d45e411cee14464993a27965d0b

  • SSDEEP

    1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SOi:YfU/WF6QMauSuiWNi9eNOl0007NZIOi

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      b71d3aaf6efe9f9afd524ab1434d1120_NeikiAnalytics.exe

    • Size

      134KB

    • MD5

      b71d3aaf6efe9f9afd524ab1434d1120

    • SHA1

      0a94f4dc37bd9024de373c149e8ff2e84cf402c9

    • SHA256

      ebec7978986c763dc0bebebf7337d14efc4829b55dbf910a565e996e267502b5

    • SHA512

      13506b6fd1c95e12215664e81a4f8e8c34085a18a04a6c6d1b0407ef842c655704199236c98ff9e92de01bcb0d2a3d3b25395d45e411cee14464993a27965d0b

    • SSDEEP

      1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SOi:YfU/WF6QMauSuiWNi9eNOl0007NZIOi

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks