Overview

overview

7

Static

static

7

e34ed89299...cs.exe

windows7-x64

7

e34ed89299...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e34ed89299b21df8903a367f30058450_NeikiAnalytics.exe

  • Size

    13KB

  • Sample

    240616-j3tn3azemp

  • MD5

    e34ed89299b21df8903a367f30058450

  • SHA1

    f94c7c3f0f05289a93e247047c64511254227b27

  • SHA256

    ab6098c3001f397b2cc5f934985d2e4f4e41ae1e553b4b219d6c56cc25a86f46

  • SHA512

    2857b3d21bebf4d824a2c8ef6a83dfeb42919e6d2a3c171f2010500b5b0ed534d4b479e682bdc13850984a4431b4083deee03788aa4168e270a68b2eae114aa3

  • SSDEEP

    192:pjUWFh4fvYGIQnsA6psQ56uFaNJhLkwcud2DH9VwGfctQEAC5Es9Gsj5Efx8X5d5:5KE7pD/aNJawcudoD7U55Es9GsGyB

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      e34ed89299b21df8903a367f30058450_NeikiAnalytics.exe

    • Size

      13KB

    • MD5

      e34ed89299b21df8903a367f30058450

    • SHA1

      f94c7c3f0f05289a93e247047c64511254227b27

    • SHA256

      ab6098c3001f397b2cc5f934985d2e4f4e41ae1e553b4b219d6c56cc25a86f46

    • SHA512

      2857b3d21bebf4d824a2c8ef6a83dfeb42919e6d2a3c171f2010500b5b0ed534d4b479e682bdc13850984a4431b4083deee03788aa4168e270a68b2eae114aa3

    • SSDEEP

      192:pjUWFh4fvYGIQnsA6psQ56uFaNJhLkwcud2DH9VwGfctQEAC5Es9Gsj5Efx8X5d5:5KE7pD/aNJawcudoD7U55Es9GsGyB

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks