Overview

overview

10

Static

static

3

43549be5a1...cs.exe

windows7-x64

10

43549be5a1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43549be5a122ba966babacc91b5163e0_NeikiAnalytics.exe

  • Size

    53KB

  • Sample

    240605-gxnvhsgb5v

  • MD5

    43549be5a122ba966babacc91b5163e0

  • SHA1

    b912fd60fbe13b5134afef0e6f25e64997777dbb

  • SHA256

    9fc0e79a20c09ca7017d1cc1e8e34c6141ca7a7ab9a45a482cba2f5b0e4f27fc

  • SHA512

    9b6d83936f40978fadfb19b9c325134520d40a6db92a521e199ab14124b3ef91c99bd8c8dff198f7b86cb64942567af9f1b0b39cf5bb1e69bae91de00e972ce4

  • SSDEEP

    1536:vNSg8r8Qlxho7Kp3StjEMjmLM3ztDJWZsXy4JzxPM0:IxhoJJjmLM3zRJWZsXy4Jd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      43549be5a122ba966babacc91b5163e0_NeikiAnalytics.exe

    • Size

      53KB

    • MD5

      43549be5a122ba966babacc91b5163e0

    • SHA1

      b912fd60fbe13b5134afef0e6f25e64997777dbb

    • SHA256

      9fc0e79a20c09ca7017d1cc1e8e34c6141ca7a7ab9a45a482cba2f5b0e4f27fc

    • SHA512

      9b6d83936f40978fadfb19b9c325134520d40a6db92a521e199ab14124b3ef91c99bd8c8dff198f7b86cb64942567af9f1b0b39cf5bb1e69bae91de00e972ce4

    • SSDEEP

      1536:vNSg8r8Qlxho7Kp3StjEMjmLM3ztDJWZsXy4JzxPM0:IxhoJJjmLM3zRJWZsXy4Jd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks