General

  • Target

    8e9f6b2489b964e4b78ea9dd48160160_NeikiAnalytics.exe

  • Size

    301KB

  • Sample

    240613-224rravame

  • MD5

    8e9f6b2489b964e4b78ea9dd48160160

  • SHA1

    3a55e95d7b1c877ef9bbe4bdc692f51c2132ee6d

  • SHA256

    96074cb3d3ef4cb6c33b2cd1a2a1a972b64609865237123cd95046988004d838

  • SHA512

    60c6c2ba97aef5ab843e914ee43dc3cff107acda20f37ef9d5f39d322821bbb1aa16dfa96b1aaef46526d6424fe8cd8d300e5c3cb9b5d557656b337d42a93b41

  • SSDEEP

    6144:UEUXKfRthkQlBcwyMXYQLhY2Tx5nLQtej0x/mYjWw28HgA:UElkeHypQVrThj0x/mdA

Score
7/10
upx

Malware Config

Targets

    • Target

      8e9f6b2489b964e4b78ea9dd48160160_NeikiAnalytics.exe

    • Size

      301KB

    • MD5

      8e9f6b2489b964e4b78ea9dd48160160

    • SHA1

      3a55e95d7b1c877ef9bbe4bdc692f51c2132ee6d

    • SHA256

      96074cb3d3ef4cb6c33b2cd1a2a1a972b64609865237123cd95046988004d838

    • SHA512

      60c6c2ba97aef5ab843e914ee43dc3cff107acda20f37ef9d5f39d322821bbb1aa16dfa96b1aaef46526d6424fe8cd8d300e5c3cb9b5d557656b337d42a93b41

    • SSDEEP

      6144:UEUXKfRthkQlBcwyMXYQLhY2Tx5nLQtej0x/mYjWw28HgA:UElkeHypQVrThj0x/mdA

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      bf712f32249029466fa86756f5546950

    • SHA1

      75ac4dc4808ac148ddd78f6b89a51afbd4091c2e

    • SHA256

      7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af

    • SHA512

      13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

    • SSDEEP

      192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/

    Score
    3/10
    • Target

      $PLUGINSDIR/UAC.dll

    • Size

      13KB

    • MD5

      a88baad3461d2e9928a15753b1d93fd7

    • SHA1

      bb826e35264968bbc3b981d8430ac55df1e6d4a6

    • SHA256

      c5ab2926c268257122d0342739e73573d7eeda34c861bc7a68a02cbc69bd41af

    • SHA512

      5edcf46680716930da7fd1a41b8b0426f057cf4becefb3ee84798ec8b449726afb822fb626c4942036a1ae3bb937184d1f71d0e45075abb5bf167f5d833df43a

    • SSDEEP

      192:qP6KdXy+Yo7e1J8qC25a5mDFmCLGUCVGpU6uNck87I0S/TDqwyTq+:q/q3Pgd5mx6VkEck87ILCTN

    Score
    3/10
    • Target

      $PLUGINSDIR/execDos.dll

    • Size

      5KB

    • MD5

      0deb397ca1e716bb7b15e1754e52b2ac

    • SHA1

      fbb9bcf872c5dbb4ca4c80fb21d41519bc273ef5

    • SHA256

      720be35cd1b4a333264713dc146b4ad024f3a7ad0644c2d8c6fcedd3c30e8a1f

    • SHA512

      507db0bee0897660750007e7ce674406acf9e8bf942cf26ded5654c07682757b07c9eb767bead0966478abc554dc9a6461c4288dc35d12cacfadad4c128f1bb7

    • SSDEEP

      96:J++xDiP4p7t7dNOt3stxtRFFXxGD6qxlnKE6ttdH3r3:Rx9pJ7jQs5toD6Cln/6tt1

    Score
    3/10
    • Target

      $PLUGINSDIR/junction.exe

    • Size

      68KB

    • MD5

      6366387416e9e3657b0e8b9fa11331f4

    • SHA1

      3060e760f5293349f0d3a6911d19a54ab44c690d

    • SHA256

      16c7f00395c54f2c84bf3717a5ab5533d9ec0ce58502c58f75377489b4807b33

    • SHA512

      b70fea1d79f2cb3bc634dd50d32aa0a52431f2eb5458cd7b984cb48c3b756e11dc95136718dc44fcba69b7ccb3f45e5db0432d2281bb35727a2ae12d0d93025f

    • SSDEEP

      1536:UsO+k6e5kWY2NccM4ljeC0xXNs5YyQMHjA2ishP9rHU/:Uh+k6e5LlcejeXxX0Hs2VP9o/

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      $PLUGINSDIR/newadvsplash.dll

    • Size

      8KB

    • MD5

      55a723e125afbc9b3a41d46f41749068

    • SHA1

      01618b26fec6b8c6bdb866e6e4d0f7a0529fe97c

    • SHA256

      0a70cc4b93d87ecd93e538cfbed7c9a4b8b5c6f1042c6069757bda0d1279ed06

    • SHA512

      559157fa1b3eb6ae1f9c0f2c71ccc692a0a0affb1d6498a8b8db1436d236fd91891897ac620ed5a588beba2efa43ef064211a7fcadb5c3a3c5e2be1d23ef9d4c

    • SSDEEP

      96:/VV0Rwtvrm2nQujIvP9dir3UniV/zRzVR3rN3k8Jd18tsPcaqhx:/VV0KtC2yH9d83BzVR53kEQFaq

    Score
    1/10
    • Target

      $PLUGINSDIR/newtextreplace.dll

    • Size

      11KB

    • MD5

      b5358341df2cb171876a5f201e31a834

    • SHA1

      df34750ea5504274be5ff8ddd306b49e302d04f9

    • SHA256

      156b9b583399faf13c4d46b89339fb0f7f38dc847ac2d7872178d8e3998b9734

    • SHA512

      821dc42e24fa2d44a1d4d16b26c3da2688dac0fa44a266e38da2aff706c91440d83a87abc74131930e6c38a44a0c5e627db2d045375fde147e0edd3276f4b014

    • SSDEEP

      192:GGhRfigbU26niqo9m+9k15AA1NrW0QfaDx3nxNLr6s+:GIwgSnhv/IaDx3n6X

    Score
    3/10
    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      132e6153717a7f9710dcea4536f364cd

    • SHA1

      e39bc82c7602e6dd0797115c2bd12e872a5fb2ab

    • SHA256

      d29afce2588d8dd7bb94c00ca91cac0e85b80ffa6b221f5ffcb83a2497228eb2

    • SHA512

      9aeb0b3051ce07fb9f03dfee7cea4a5e423425e48cb538173bd2a167817f867a30bd4d27d07875f27ca00031745b24547030b7f146660b049fa717590f1c77e1

    • SSDEEP

      96:M/SspqrIYxLPEQhThvov3TE4/2Sa5P9QFFYzOx4uF3sbSEI5LP39sQvM:M/QUG7lhvov36S5FcUjliSEI5LuQ

    Score
    3/10
    • Target

      $PLUGINSDIR/registry.dll

    • Size

      29KB

    • MD5

      2880bf3bbbc8dcaeb4367df8a30f01a8

    • SHA1

      cb5c65eae4ae923514a67c95ada2d33b0c3f2118

    • SHA256

      acb79c55b3b9c460d032a6f3aaf6c642bf8c1d450e23279d091cc0c6ca510973

    • SHA512

      ca978702ce7aa04f8d9781a819a57974f9627e969138e23e81e0792ff8356037c300bb27a37a9b5c756220a7788a583c8e40cc23125bcbe48849561b159c4fa3

    • SSDEEP

      768:HsKZwhFkGOr0Ga4+8DFFHR4mmw5+64fuKwX13:HLKmGOr0Ga4+8DFFHRrmw5+m

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks