Overview

overview

10

Static

static

3

52c7bed260...cs.exe

windows7-x64

10

52c7bed260...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    52c7bed26079a6b0b3099c9111e168b0_NeikiAnalytics.exe

  • Size

    159KB

  • Sample

    240613-bkvjmssdjk

  • MD5

    52c7bed26079a6b0b3099c9111e168b0

  • SHA1

    60b15b1162f34c91bd3b4d6169c46ff6c93dac69

  • SHA256

    450a86b6f600b2bdc727f061daf5da258aceb19094b7ff4f47a74b627701b31e

  • SHA512

    c4ae6694b7a4996509ac4a025c0abb57e528da5a34360d4d645c748e419a4dc0ea2c91a0da201bad8441158e676ff2a4d0bb6e9b20b84ab10527690e871895a1

  • SSDEEP

    3072:m/5F/E7tEf0E+p+tYlpJH7iXQNgggHlxDZiYLK5WpYp:mhF4c5+wWJH7igNgjdFKsW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      52c7bed26079a6b0b3099c9111e168b0_NeikiAnalytics.exe

    • Size

      159KB

    • MD5

      52c7bed26079a6b0b3099c9111e168b0

    • SHA1

      60b15b1162f34c91bd3b4d6169c46ff6c93dac69

    • SHA256

      450a86b6f600b2bdc727f061daf5da258aceb19094b7ff4f47a74b627701b31e

    • SHA512

      c4ae6694b7a4996509ac4a025c0abb57e528da5a34360d4d645c748e419a4dc0ea2c91a0da201bad8441158e676ff2a4d0bb6e9b20b84ab10527690e871895a1

    • SSDEEP

      3072:m/5F/E7tEf0E+p+tYlpJH7iXQNgggHlxDZiYLK5WpYp:mhF4c5+wWJH7igNgjdFKsW

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables use of System Restore points

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks