Overview

overview

10

Static

static

3

4b5a7827cf...cs.exe

windows7-x64

10

4b5a7827cf...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b5a7827cf53c738d230da5d040f0dead843bcb2d748dcc222d1d59a967013db_NeikiAnalytics.exe

  • Size

    1000KB

  • Sample

    240624-hjy9rszarh

  • MD5

    5c248ca65495027617d3f8adca0cf440

  • SHA1

    445cd597f435d0b72c9ab9b4a5580c50aff30638

  • SHA256

    4b5a7827cf53c738d230da5d040f0dead843bcb2d748dcc222d1d59a967013db

  • SHA512

    be993461cc7d17481a0b9efc5847c4da33f356dbace818dac92b4546eedc4b7a860801e34444f8f38c54b74703cba43b66b8bb8e229e0826335c7fdc30fb5c69

  • SSDEEP

    12288:VIpT1m3tHtHBFLPj3TmLnWrOxNuxC97hFq9o7:VITm3xtHBFLPj368MoC9Dq9o7

Score
10/10
persistence

Malware Config

Targets

    • Target

      4b5a7827cf53c738d230da5d040f0dead843bcb2d748dcc222d1d59a967013db_NeikiAnalytics.exe

    • Size

      1000KB

    • MD5

      5c248ca65495027617d3f8adca0cf440

    • SHA1

      445cd597f435d0b72c9ab9b4a5580c50aff30638

    • SHA256

      4b5a7827cf53c738d230da5d040f0dead843bcb2d748dcc222d1d59a967013db

    • SHA512

      be993461cc7d17481a0b9efc5847c4da33f356dbace818dac92b4546eedc4b7a860801e34444f8f38c54b74703cba43b66b8bb8e229e0826335c7fdc30fb5c69

    • SSDEEP

      12288:VIpT1m3tHtHBFLPj3TmLnWrOxNuxC97hFq9o7:VITm3xtHBFLPj368MoC9Dq9o7

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks