Overview

overview

10

Static

static

10

45e1ddf872...cs.exe

windows7-x64

10

45e1ddf872...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    45e1ddf872faed14ee57598c583ec060_NeikiAnalytics.exe

  • Size

    337KB

  • Sample

    240617-epqb9sxfjk

  • MD5

    45e1ddf872faed14ee57598c583ec060

  • SHA1

    74f12b28bf40a66be440665b5e631cf518dab9e4

  • SHA256

    5fc00d4ef0bf8f843c0272c7c4a93439e631a9d3ca1395d29e4bbfa3c1637ab9

  • SHA512

    a1240c6f46115411bb3c5490b3bd72e9b60968b115196c0a31e928404b57fa4e161d6a4c96616edc6f6b2e0383764b67e408ff7c0289e64c9bdba68a3c8c84c8

  • SSDEEP

    3072:ti4jvbjiY/Ge+kHgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:ti4/uY/Ge+kH1+fIyG5jZkCwi8r

Score
10/10
njratpersistencetrojan

Malware Config

Targets

    • Target

      45e1ddf872faed14ee57598c583ec060_NeikiAnalytics.exe

    • Size

      337KB

    • MD5

      45e1ddf872faed14ee57598c583ec060

    • SHA1

      74f12b28bf40a66be440665b5e631cf518dab9e4

    • SHA256

      5fc00d4ef0bf8f843c0272c7c4a93439e631a9d3ca1395d29e4bbfa3c1637ab9

    • SHA512

      a1240c6f46115411bb3c5490b3bd72e9b60968b115196c0a31e928404b57fa4e161d6a4c96616edc6f6b2e0383764b67e408ff7c0289e64c9bdba68a3c8c84c8

    • SSDEEP

      3072:ti4jvbjiY/Ge+kHgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:ti4/uY/Ge+kH1+fIyG5jZkCwi8r

    Score
    10/10
    njratpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

      trojannjrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks