Overview

overview

7

Static

static

3

8de280b7f1...cs.exe

windows7-x64

7

8de280b7f1...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8de280b7f1505473ecb2da47a28df310_NeikiAnalytics.exe

  • Size

    75KB

  • Sample

    240608-fmw8gaac48

  • MD5

    8de280b7f1505473ecb2da47a28df310

  • SHA1

    86716ec10f99523e90083607ab385705040f2006

  • SHA256

    ed5700be143e55d94dc4ed5f5a6148754f39c74234fbb9038159c6cbda8a28ef

  • SHA512

    469793050443389cfce1164e0adafce1682feba09511078397bf03cce8c125ef5376d8f4e4f2154edeea4936beb49d2665bf4c129492521a349c1d841f1ef968

  • SSDEEP

    1536:Mx1Qja7luy6y0s4sqfkbnAKBOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3s:kOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPE

Score
7/10
persistence

Malware Config

Targets

    • Target

      8de280b7f1505473ecb2da47a28df310_NeikiAnalytics.exe

    • Size

      75KB

    • MD5

      8de280b7f1505473ecb2da47a28df310

    • SHA1

      86716ec10f99523e90083607ab385705040f2006

    • SHA256

      ed5700be143e55d94dc4ed5f5a6148754f39c74234fbb9038159c6cbda8a28ef

    • SHA512

      469793050443389cfce1164e0adafce1682feba09511078397bf03cce8c125ef5376d8f4e4f2154edeea4936beb49d2665bf4c129492521a349c1d841f1ef968

    • SSDEEP

      1536:Mx1Qja7luy6y0s4sqfkbnAKBOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3s:kOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPE

    Score
    7/10
    persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks