Overview

overview

10

Static

static

3

5e01ead746...cs.exe

windows7-x64

10

5e01ead746...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e01ead7467cf6b559ec5f9f9c0a9180_NeikiAnalytics.exe

  • Size

    31KB

  • Sample

    240617-hs47dazale

  • MD5

    5e01ead7467cf6b559ec5f9f9c0a9180

  • SHA1

    14fae187bb5b290f809bf1470a8f9047f1cede8d

  • SHA256

    cedd9b5eb5d7f3ae8aee30dbd07044dcf70b0ac88c5333b1e5dd69bf3adb1191

  • SHA512

    3756fd2100f4fb3a1b6880bbf146b8c2d1ec9e937fdfe7a44a22aa53560944f09cc59132b3121199fa36a378d25593247f8153a22d0455d24ecfd53b335bb9b7

  • SSDEEP

    768:/6j3dfUZBWSDVWl8zHPHXyXHCzcHHvzQBdi9vc:/62BWKVWl4vUv4Wvc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5e01ead7467cf6b559ec5f9f9c0a9180_NeikiAnalytics.exe

    • Size

      31KB

    • MD5

      5e01ead7467cf6b559ec5f9f9c0a9180

    • SHA1

      14fae187bb5b290f809bf1470a8f9047f1cede8d

    • SHA256

      cedd9b5eb5d7f3ae8aee30dbd07044dcf70b0ac88c5333b1e5dd69bf3adb1191

    • SHA512

      3756fd2100f4fb3a1b6880bbf146b8c2d1ec9e937fdfe7a44a22aa53560944f09cc59132b3121199fa36a378d25593247f8153a22d0455d24ecfd53b335bb9b7

    • SSDEEP

      768:/6j3dfUZBWSDVWl8zHPHXyXHCzcHHvzQBdi9vc:/62BWKVWl4vUv4Wvc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks