Overview

overview

10

Static

static

3

6a46d67f49...cs.exe

windows7-x64

10

6a46d67f49...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a46d67f491c186ed81c087644e4167184e9aba12b1f7c2eba0165b251eb7e3f_NeikiAnalytics.exe

  • Size

    37KB

  • Sample

    240624-neb7bssgpp

  • MD5

    13f3c8c5802e2d013c10faebb8391480

  • SHA1

    f146a8fcd68bf8300c4c09beab88de8d3cf0d134

  • SHA256

    6a46d67f491c186ed81c087644e4167184e9aba12b1f7c2eba0165b251eb7e3f

  • SHA512

    990b8891717d16467232c90307851d6d7778cf0f5e1a6cc7baf57bf72951dfb018d6a59f5ef8fad865acaef8824aa13fb3dc2d8cd490de26a13e15b4b954abe9

  • SSDEEP

    384:epAhckQj9H0okp0e4Xue3oFGz55ZK2oGnozhtN9n9nI8WAH:e2n4XDAG5HhnozT3nJI8l

Score
10/10
ginkpersistenceworm

Malware Config

Targets

    • Target

      6a46d67f491c186ed81c087644e4167184e9aba12b1f7c2eba0165b251eb7e3f_NeikiAnalytics.exe

    • Size

      37KB

    • MD5

      13f3c8c5802e2d013c10faebb8391480

    • SHA1

      f146a8fcd68bf8300c4c09beab88de8d3cf0d134

    • SHA256

      6a46d67f491c186ed81c087644e4167184e9aba12b1f7c2eba0165b251eb7e3f

    • SHA512

      990b8891717d16467232c90307851d6d7778cf0f5e1a6cc7baf57bf72951dfb018d6a59f5ef8fad865acaef8824aa13fb3dc2d8cd490de26a13e15b4b954abe9

    • SSDEEP

      384:epAhckQj9H0okp0e4Xue3oFGz55ZK2oGnozhtN9n9nI8WAH:e2n4XDAG5HhnozT3nJI8l

    Score
    10/10
    ginkpersistenceworm
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks