Overview

overview

10

Static

static

3

218fa0a50a...cs.exe

windows7-x64

10

218fa0a50a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    218fa0a50a5e97e23a8054c1e2e3bb7627452ea45316bda091635eae6d28cb3c_NeikiAnalytics.exe

  • Size

    1020KB

  • Sample

    240627-1c1s5asbka

  • MD5

    c216dd86b9c91ba04f919525bf61da50

  • SHA1

    6c922cd03b166d22ed43fd4a2d7a4c63b91a85ba

  • SHA256

    218fa0a50a5e97e23a8054c1e2e3bb7627452ea45316bda091635eae6d28cb3c

  • SHA512

    b15a1b3058872ff0b82dd6c0914f2307a980309c8ae9d1c777aee0a46e9279c8e8ae87cb36a603c2df94f60edcb71952df4adf8e67c6d6bdb502c0ec16135d2c

  • SSDEEP

    6144:B2Q7d9ODxOEfCSN9ehzXjOYpui6yYPaIGckpyWO63t5YNpui6yYP7u7R5Zk:ka0UEfX3CzXjOYpV6yYPI3cpV6yYPd

Score
10/10
persistence

Malware Config

Targets

    • Target

      218fa0a50a5e97e23a8054c1e2e3bb7627452ea45316bda091635eae6d28cb3c_NeikiAnalytics.exe

    • Size

      1020KB

    • MD5

      c216dd86b9c91ba04f919525bf61da50

    • SHA1

      6c922cd03b166d22ed43fd4a2d7a4c63b91a85ba

    • SHA256

      218fa0a50a5e97e23a8054c1e2e3bb7627452ea45316bda091635eae6d28cb3c

    • SHA512

      b15a1b3058872ff0b82dd6c0914f2307a980309c8ae9d1c777aee0a46e9279c8e8ae87cb36a603c2df94f60edcb71952df4adf8e67c6d6bdb502c0ec16135d2c

    • SSDEEP

      6144:B2Q7d9ODxOEfCSN9ehzXjOYpui6yYPaIGckpyWO63t5YNpui6yYP7u7R5Zk:ka0UEfX3CzXjOYpV6yYPI3cpV6yYPd

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks