General

  • Target

    986ec6e70492f9f97c911f7840301210_NeikiAnalytics.exe

  • Size

    131KB

  • Sample

    240614-b7glasvapn

  • MD5

    986ec6e70492f9f97c911f7840301210

  • SHA1

    4003643a5bb06b8b840df51bf57ddb8f12885b59

  • SHA256

    e31469db6210a1270ffd7e1f0f53776f6b3e30b8a7f839010b77754f2c10f1d8

  • SHA512

    a24917d5465d1f841c4bb2ac3559665b00c881c1c6ddc91a79f74489a87ecd9e787cbc02ab012d29948386f606400b3102e9f5d9d70d3ccd3818190eb80142d7

  • SSDEEP

    3072:yEboFVlGAvwsgbpvYfMTc72L10fPsout6nn:BBzsgbpvnTcyOPsoS6nn

Score
7/10
upx

Malware Config

Targets

    • Target

      986ec6e70492f9f97c911f7840301210_NeikiAnalytics.exe

    • Size

      131KB

    • MD5

      986ec6e70492f9f97c911f7840301210

    • SHA1

      4003643a5bb06b8b840df51bf57ddb8f12885b59

    • SHA256

      e31469db6210a1270ffd7e1f0f53776f6b3e30b8a7f839010b77754f2c10f1d8

    • SHA512

      a24917d5465d1f841c4bb2ac3559665b00c881c1c6ddc91a79f74489a87ecd9e787cbc02ab012d29948386f606400b3102e9f5d9d70d3ccd3818190eb80142d7

    • SSDEEP

      3072:yEboFVlGAvwsgbpvYfMTc72L10fPsout6nn:BBzsgbpvnTcyOPsoS6nn

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks