Overview

overview

10

Static

static

3

4816805797...cs.exe

windows7-x64

10

4816805797...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    481680579767fdfe0365e6755e0cf400_NeikiAnalytics.exe

  • Size

    24KB

  • Sample

    240605-h2yqyshc7y

  • MD5

    481680579767fdfe0365e6755e0cf400

  • SHA1

    8696260eb362335bde180389bcea26554a9d5116

  • SHA256

    35e5806734e43c0eefe662eaee70b777905c98047ea28445ab1df5b9c73b14e7

  • SHA512

    b5bcc861a460ec785884bccdfc2a4dcc0e4fdd496a6c90e11f8d8c32404085df1d8a7a6fd0bce1ab5b1108ddb9fd07e55a0a82e6653074a817c7fc85b21da708

  • SSDEEP

    384:jIz4yDiJZdo6JXoNXeFEnPHshPwpL/ExTg1kbI6QB1U7Z/5nhzguTizTjrKJ:jIUTZNJunPHsh6yTg1qIRB1cafs

Score
10/10
evasionpersistencetrojanupx

Malware Config

Targets

    • Target

      481680579767fdfe0365e6755e0cf400_NeikiAnalytics.exe

    • Size

      24KB

    • MD5

      481680579767fdfe0365e6755e0cf400

    • SHA1

      8696260eb362335bde180389bcea26554a9d5116

    • SHA256

      35e5806734e43c0eefe662eaee70b777905c98047ea28445ab1df5b9c73b14e7

    • SHA512

      b5bcc861a460ec785884bccdfc2a4dcc0e4fdd496a6c90e11f8d8c32404085df1d8a7a6fd0bce1ab5b1108ddb9fd07e55a0a82e6653074a817c7fc85b21da708

    • SSDEEP

      384:jIz4yDiJZdo6JXoNXeFEnPHshPwpL/ExTg1kbI6QB1U7Z/5nhzguTizTjrKJ:jIUTZNJunPHsh6yTg1qIRB1cafs

    Score
    10/10
    evasionpersistencetrojanupx

    • Windows security bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Windows security modification

      evasiontrojan

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks