Overview

overview

10

Static

static

3

70b9769a30...cs.exe

windows7-x64

10

70b9769a30...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70b9769a304fa94078352a02160e9280_NeikiAnalytics.exe

  • Size

    212KB

  • Sample

    240617-k42lqsxgpr

  • MD5

    70b9769a304fa94078352a02160e9280

  • SHA1

    ac61269a97842c8de3827cf18a6a89fe5b660345

  • SHA256

    94094b3aedf1b332985e48e6dd32f25ae63236599a9c2dbd0f003bc6ae64ced0

  • SHA512

    5f5d8986deca63a545aeb27cc627764b4eba20d2bd79dcfbded6000d5ad818ecaa7903f992d2add39b54e4da56228d54c01e825c305296aa466f981982bf6430

  • SSDEEP

    6144:wob34ERMS/H7YAVsobrVn5G4E3Hi96mbQzJWFO8Omw4G:PboEj/8ASWM4Ki96/zqIKG

Score
10/10
persistence

Malware Config

Targets

    • Target

      70b9769a304fa94078352a02160e9280_NeikiAnalytics.exe

    • Size

      212KB

    • MD5

      70b9769a304fa94078352a02160e9280

    • SHA1

      ac61269a97842c8de3827cf18a6a89fe5b660345

    • SHA256

      94094b3aedf1b332985e48e6dd32f25ae63236599a9c2dbd0f003bc6ae64ced0

    • SHA512

      5f5d8986deca63a545aeb27cc627764b4eba20d2bd79dcfbded6000d5ad818ecaa7903f992d2add39b54e4da56228d54c01e825c305296aa466f981982bf6430

    • SSDEEP

      6144:wob34ERMS/H7YAVsobrVn5G4E3Hi96mbQzJWFO8Omw4G:PboEj/8ASWM4Ki96/zqIKG

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks