Overview

overview

7

Static

static

3

9a43033bae...cs.exe

windows7-x64

7

9a43033bae...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9a43033bae3435e3835d55db273a9e50_NeikiAnalytics.exe

  • Size

    132KB

  • Sample

    240614-cmwp6a1gpe

  • MD5

    9a43033bae3435e3835d55db273a9e50

  • SHA1

    385e437e4fd6ce8ca22d8da387856080428fed12

  • SHA256

    b9653c5a24ad99ec882956b8c2e5600819fe72b8b172843c7118568ea1b4332f

  • SHA512

    849948337c35288251113fedb1c2961dbb2c83b1129d63cc4a5820e3f8e545dda7d1d28a62309d632e70366397e9fcbd20ba83e8479554dc1435574eec9531f7

  • SSDEEP

    3072:DEboFVlGAvwsgbpvYfMTc72L10fPsout6nnnS:ABzsgbpvnTcyOPsoS6nnnS

Score
7/10
upx

Malware Config

Targets

    • Target

      9a43033bae3435e3835d55db273a9e50_NeikiAnalytics.exe

    • Size

      132KB

    • MD5

      9a43033bae3435e3835d55db273a9e50

    • SHA1

      385e437e4fd6ce8ca22d8da387856080428fed12

    • SHA256

      b9653c5a24ad99ec882956b8c2e5600819fe72b8b172843c7118568ea1b4332f

    • SHA512

      849948337c35288251113fedb1c2961dbb2c83b1129d63cc4a5820e3f8e545dda7d1d28a62309d632e70366397e9fcbd20ba83e8479554dc1435574eec9531f7

    • SSDEEP

      3072:DEboFVlGAvwsgbpvYfMTc72L10fPsout6nnnS:ABzsgbpvnTcyOPsoS6nnnS

    Score
    7/10
    upx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks