Overview

overview

10

Static

static

3

8e99fa4c54...cs.exe

windows7-x64

10

8e99fa4c54...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e99fa4c549c5b7a39f45ebccffaaf40_NeikiAnalytics.exe

  • Size

    199KB

  • Sample

    240608-fslzpaac92

  • MD5

    8e99fa4c549c5b7a39f45ebccffaaf40

  • SHA1

    fe87036f5f877c7ea4c66bb17b370c3e90d1f668

  • SHA256

    77b3ea43e47635f9de0b05eb4c9dabe435b14a6a996675ec83b00c2234016481

  • SHA512

    111dff1969c02842613aa30927f88619856cfe644f1b54c92ba0bac392cbc3877c486545e3a46eac4a8264819fa5b77377138074efbde7d168322559357fd49f

  • SSDEEP

    3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4Pmu7:7vEN2U+T6i5LirrllHy4HUcMQY6B

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8e99fa4c549c5b7a39f45ebccffaaf40_NeikiAnalytics.exe

    • Size

      199KB

    • MD5

      8e99fa4c549c5b7a39f45ebccffaaf40

    • SHA1

      fe87036f5f877c7ea4c66bb17b370c3e90d1f668

    • SHA256

      77b3ea43e47635f9de0b05eb4c9dabe435b14a6a996675ec83b00c2234016481

    • SHA512

      111dff1969c02842613aa30927f88619856cfe644f1b54c92ba0bac392cbc3877c486545e3a46eac4a8264819fa5b77377138074efbde7d168322559357fd49f

    • SSDEEP

      3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4Pmu7:7vEN2U+T6i5LirrllHy4HUcMQY6B

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks