Overview

overview

10

Static

static

3

5b1c0fbba0...cs.exe

windows7-x64

10

5b1c0fbba0...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b1c0fbba05ea247b9d2137c0f422c80_NeikiAnalytics.exe

  • Size

    145KB

  • Sample

    240617-hdj8nasflj

  • MD5

    5b1c0fbba05ea247b9d2137c0f422c80

  • SHA1

    46b446bbbd8f3459a3a8360ca500491d855631e2

  • SHA256

    72bb4a30c8859dd6aee4d6dd22f8ebb911f6886e70027b720724247f0473c823

  • SHA512

    1c1e54122059b52ff11155861e6e03719fd242c5900ca206a70a36b80a31e6dbd43eb618739b9f586cc51ddb844e2cb23f049dea66b1a635a6e146060c45714d

  • SSDEEP

    3072:u6LRZS5u9bLl64p1+qD3pFBEV52Ae5aFnVB:hLRZSE5l64p1+c5Id

Score
10/10
persistence

Malware Config

Targets

    • Target

      5b1c0fbba05ea247b9d2137c0f422c80_NeikiAnalytics.exe

    • Size

      145KB

    • MD5

      5b1c0fbba05ea247b9d2137c0f422c80

    • SHA1

      46b446bbbd8f3459a3a8360ca500491d855631e2

    • SHA256

      72bb4a30c8859dd6aee4d6dd22f8ebb911f6886e70027b720724247f0473c823

    • SHA512

      1c1e54122059b52ff11155861e6e03719fd242c5900ca206a70a36b80a31e6dbd43eb618739b9f586cc51ddb844e2cb23f049dea66b1a635a6e146060c45714d

    • SSDEEP

      3072:u6LRZS5u9bLl64p1+qD3pFBEV52Ae5aFnVB:hLRZSE5l64p1+c5Id

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks