Overview

overview

10

Static

static

3

1d61cba784...cs.exe

windows7-x64

10

1d61cba784...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d61cba7849ce44e167e4722f18a9620_NeikiAnalytics.exe

  • Size

    66KB

  • Sample

    240606-1hdksade54

  • MD5

    1d61cba7849ce44e167e4722f18a9620

  • SHA1

    13f59780f8d9ba09c2d7881eb676b0f8b001cefa

  • SHA256

    17dde2c0b57cc387900901ab24748b470e4ac166024cee18b6d1921bbaf035dc

  • SHA512

    38175bd199fede529cce3b55ed2363eeb1f349d0cee80ff4c77c6d69740ea69fe8571b5c6c53cbe3916bcfe33f3fece5a25844795b081b27f3d21d84d1009456

  • SSDEEP

    1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXi1:IeklMMYJhqezw/pXzH9i1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1d61cba7849ce44e167e4722f18a9620_NeikiAnalytics.exe

    • Size

      66KB

    • MD5

      1d61cba7849ce44e167e4722f18a9620

    • SHA1

      13f59780f8d9ba09c2d7881eb676b0f8b001cefa

    • SHA256

      17dde2c0b57cc387900901ab24748b470e4ac166024cee18b6d1921bbaf035dc

    • SHA512

      38175bd199fede529cce3b55ed2363eeb1f349d0cee80ff4c77c6d69740ea69fe8571b5c6c53cbe3916bcfe33f3fece5a25844795b081b27f3d21d84d1009456

    • SSDEEP

      1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXi1:IeklMMYJhqezw/pXzH9i1

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks