Overview

overview

10

Static

static

3

3c44bff815...cs.exe

windows7-x64

10

3c44bff815...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c44bff81566fdea80e51e38d57136d0_NeikiAnalytics.exe

  • Size

    66KB

  • Sample

    240607-gf5rpsbe68

  • MD5

    3c44bff81566fdea80e51e38d57136d0

  • SHA1

    3e6930db5e6ed36e76607a73902051a32a1b4e40

  • SHA256

    7ecb7b1582b8b2ac2e384ef80cc8960d6f106b70aef2c7d2d563a4837e680745

  • SHA512

    142f4c2e48f6e3d4ba953e1f876de7f9f0bd4e1c64542c89e6f23eead11d9fc276f7a259654eec49094dfea88ffed253c0bad154a9b6d43948a9a73a4723734b

  • SSDEEP

    1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXix:IeklMMYJhqezw/pXzH9ix

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3c44bff81566fdea80e51e38d57136d0_NeikiAnalytics.exe

    • Size

      66KB

    • MD5

      3c44bff81566fdea80e51e38d57136d0

    • SHA1

      3e6930db5e6ed36e76607a73902051a32a1b4e40

    • SHA256

      7ecb7b1582b8b2ac2e384ef80cc8960d6f106b70aef2c7d2d563a4837e680745

    • SHA512

      142f4c2e48f6e3d4ba953e1f876de7f9f0bd4e1c64542c89e6f23eead11d9fc276f7a259654eec49094dfea88ffed253c0bad154a9b6d43948a9a73a4723734b

    • SSDEEP

      1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXix:IeklMMYJhqezw/pXzH9ix

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks