Overview

overview

10

Static

static

3

40374998b6...cs.exe

windows7-x64

10

40374998b6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    40374998b609a583d9657f047d261680_NeikiAnalytics.exe

  • Size

    53KB

  • Sample

    240605-f9ayragd64

  • MD5

    40374998b609a583d9657f047d261680

  • SHA1

    84edc3fc5b498d021cd93e80b199ff76452b6840

  • SHA256

    2c0831a1ef0e323ee7a1aa869b4ee2f18525d26b4aa77cb8ee08b975e8c90f30

  • SHA512

    cbf84fba044303bda52b35dd8bb67155ff41c6692f13ee65def2d58c395a389bd639dc0af146c583c563b98eec8e4751290798086c063b7dc5c685fe236ff5c2

  • SSDEEP

    1536:vN3g8r8Q7qqZWec7Kp3StjEMjmLM3ztDJWZsXy4JzxPMU:tqqZVcJJjmLM3zRJWZsXy4Jd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      40374998b609a583d9657f047d261680_NeikiAnalytics.exe

    • Size

      53KB

    • MD5

      40374998b609a583d9657f047d261680

    • SHA1

      84edc3fc5b498d021cd93e80b199ff76452b6840

    • SHA256

      2c0831a1ef0e323ee7a1aa869b4ee2f18525d26b4aa77cb8ee08b975e8c90f30

    • SHA512

      cbf84fba044303bda52b35dd8bb67155ff41c6692f13ee65def2d58c395a389bd639dc0af146c583c563b98eec8e4751290798086c063b7dc5c685fe236ff5c2

    • SSDEEP

      1536:vN3g8r8Q7qqZWec7Kp3StjEMjmLM3ztDJWZsXy4JzxPMU:tqqZVcJJjmLM3zRJWZsXy4Jd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks