Overview

overview

7

Static

static

3

4f68b6c252...cs.exe

windows7-x64

7

4f68b6c252...cs.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f68b6c252cb52afa6dcb184edb81739be2130ac7753d4997bc49aeb3cd7747f_NeikiAnalytics.exe

  • Size

    5.8MB

  • Sample

    240625-lpswqavgmr

  • MD5

    8b77da2070882098b43dc48252f0d950

  • SHA1

    8894c2c3d96988fc4fd0ce13bae4b3fcb12a59e7

  • SHA256

    4f68b6c252cb52afa6dcb184edb81739be2130ac7753d4997bc49aeb3cd7747f

  • SHA512

    c926b9cfcad89fc7c595d6b372fa8709956c88762b7237718d93f624fa37229bfdc8ecb7351d627b721ae6b3f0def17fcdee817bacaa1c866d8a57214ed4f9fb

  • SSDEEP

    49152:n8YBA4/kLYjAFjYtalkMyXh/ZMlqFxp73ooGBHI+ruP3A5GhOoT8NXadkMG1hdAl:8IA+pMqnhIHVruP3Ld81hCHC/zZzo

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      4f68b6c252cb52afa6dcb184edb81739be2130ac7753d4997bc49aeb3cd7747f_NeikiAnalytics.exe

    • Size

      5.8MB

    • MD5

      8b77da2070882098b43dc48252f0d950

    • SHA1

      8894c2c3d96988fc4fd0ce13bae4b3fcb12a59e7

    • SHA256

      4f68b6c252cb52afa6dcb184edb81739be2130ac7753d4997bc49aeb3cd7747f

    • SHA512

      c926b9cfcad89fc7c595d6b372fa8709956c88762b7237718d93f624fa37229bfdc8ecb7351d627b721ae6b3f0def17fcdee817bacaa1c866d8a57214ed4f9fb

    • SSDEEP

      49152:n8YBA4/kLYjAFjYtalkMyXh/ZMlqFxp73ooGBHI+ruP3A5GhOoT8NXadkMG1hdAl:8IA+pMqnhIHVruP3Ld81hCHC/zZzo

    Score
    7/10
    discoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks