Overview

overview

10

Static

static

3

7569b3dd6a...cs.exe

windows7-x64

10

7569b3dd6a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7569b3dd6ad8dc7dc3f7a64398b7e3ee024aec089c852f9432b8b64d03b0cd82_NeikiAnalytics.exe

  • Size

    135KB

  • Sample

    240624-p29xjssglc

  • MD5

    4a5fad860c2d8ec0c5f8cc424e3d6ad0

  • SHA1

    99c1714cc0dc75925fbf7b0e11bb491a9c2d51ab

  • SHA256

    7569b3dd6ad8dc7dc3f7a64398b7e3ee024aec089c852f9432b8b64d03b0cd82

  • SHA512

    8d77fb6395384d5aecef2ca938d9416b3252b12680d14bee9658c3e2e72416f022c0108f4d06b8710840b4b09d902cbf4cfb342097a3a75bb4e67c09b325c2b7

  • SSDEEP

    1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVr6:UVqoCl/YgjxEufVU0TbTyDDal56

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7569b3dd6ad8dc7dc3f7a64398b7e3ee024aec089c852f9432b8b64d03b0cd82_NeikiAnalytics.exe

    • Size

      135KB

    • MD5

      4a5fad860c2d8ec0c5f8cc424e3d6ad0

    • SHA1

      99c1714cc0dc75925fbf7b0e11bb491a9c2d51ab

    • SHA256

      7569b3dd6ad8dc7dc3f7a64398b7e3ee024aec089c852f9432b8b64d03b0cd82

    • SHA512

      8d77fb6395384d5aecef2ca938d9416b3252b12680d14bee9658c3e2e72416f022c0108f4d06b8710840b4b09d902cbf4cfb342097a3a75bb4e67c09b325c2b7

    • SSDEEP

      1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVr6:UVqoCl/YgjxEufVU0TbTyDDal56

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks