Overview

overview

7

Static

static

3

2dc958d589...cs.exe

windows7-x64

7

2dc958d589...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2dc958d58978bbd7b1108c8a0da50cf0_NeikiAnalytics.exe

  • Size

    88KB

  • Sample

    240617-btvwrssbrj

  • MD5

    2dc958d58978bbd7b1108c8a0da50cf0

  • SHA1

    bc4051bba1812f7fc6cb6c175b7a00490c8520a6

  • SHA256

    50dba9c5aa44ad0a65aeb8cf8d552a2928b7d441f1a8ffa20280757f146c5d76

  • SHA512

    42ad6a9174965f23b744c3dea27c5472df8d4ad93f269f032591b9af69921e8a7c9f6928094c19053cf7ae155c4edfb9c3da3988ad591c6de3b3e9b719892c6c

  • SSDEEP

    1536:ahUDofByDJWbMGcEFLPEPKOJUsy1+VMA:aIofBHbKMP0PvMA

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      2dc958d58978bbd7b1108c8a0da50cf0_NeikiAnalytics.exe

    • Size

      88KB

    • MD5

      2dc958d58978bbd7b1108c8a0da50cf0

    • SHA1

      bc4051bba1812f7fc6cb6c175b7a00490c8520a6

    • SHA256

      50dba9c5aa44ad0a65aeb8cf8d552a2928b7d441f1a8ffa20280757f146c5d76

    • SHA512

      42ad6a9174965f23b744c3dea27c5472df8d4ad93f269f032591b9af69921e8a7c9f6928094c19053cf7ae155c4edfb9c3da3988ad591c6de3b3e9b719892c6c

    • SSDEEP

      1536:ahUDofByDJWbMGcEFLPEPKOJUsy1+VMA:aIofBHbKMP0PvMA

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks