Overview

overview

10

Static

static

3

9559100eb6...cs.exe

windows7-x64

10

9559100eb6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9559100eb61dc46e50ffd51978d9dce0_NeikiAnalytics.exe

  • Size

    206KB

  • Sample

    240614-bbh49asdkm

  • MD5

    9559100eb61dc46e50ffd51978d9dce0

  • SHA1

    fcf6be090da5d05f2426f230ae992c2838861139

  • SHA256

    8a91cca756e95a86c9bca31ff06d42a255b27f12563a626e316ee6d9bf57c45d

  • SHA512

    17e9e12234cda406d0c49b5f624283556b3bc0334368b410e407f07e98f0e789a9fdf44671584cbef699ac8a3035537026cd8cf843efdb97545216823588db78

  • SSDEEP

    3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unL2:5vEN2U+T6i5LirrllHy4HUcMQY6K2

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9559100eb61dc46e50ffd51978d9dce0_NeikiAnalytics.exe

    • Size

      206KB

    • MD5

      9559100eb61dc46e50ffd51978d9dce0

    • SHA1

      fcf6be090da5d05f2426f230ae992c2838861139

    • SHA256

      8a91cca756e95a86c9bca31ff06d42a255b27f12563a626e316ee6d9bf57c45d

    • SHA512

      17e9e12234cda406d0c49b5f624283556b3bc0334368b410e407f07e98f0e789a9fdf44671584cbef699ac8a3035537026cd8cf843efdb97545216823588db78

    • SSDEEP

      3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unL2:5vEN2U+T6i5LirrllHy4HUcMQY6K2

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks