Overview

overview

10

Static

static

3

0f4c138be1...cs.exe

windows7-x64

10

0f4c138be1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f4c138be169000cee1ffa5cc9dce11e4ad8d3f67a43d07aed636123c54464dd_NeikiAnalytics.exe

  • Size

    65KB

  • Sample

    240628-yz7h3stfkj

  • MD5

    146e167de1808f8eba7d648f786dd9a0

  • SHA1

    8b4dc46d29da3dd70f4577cb4c46ac59c2de321f

  • SHA256

    0f4c138be169000cee1ffa5cc9dce11e4ad8d3f67a43d07aed636123c54464dd

  • SHA512

    ca541a5a1315c88d114a00e6558e9626196099d0ae3fa446e2ba6ca75d09b821c16c1ccb777002a99fccb2d3872f752c6ffa52144731079ee17e1709feffd3b9

  • SSDEEP

    1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oum:7WNqkOJWmo1HpM0MkTUmum

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0f4c138be169000cee1ffa5cc9dce11e4ad8d3f67a43d07aed636123c54464dd_NeikiAnalytics.exe

    • Size

      65KB

    • MD5

      146e167de1808f8eba7d648f786dd9a0

    • SHA1

      8b4dc46d29da3dd70f4577cb4c46ac59c2de321f

    • SHA256

      0f4c138be169000cee1ffa5cc9dce11e4ad8d3f67a43d07aed636123c54464dd

    • SHA512

      ca541a5a1315c88d114a00e6558e9626196099d0ae3fa446e2ba6ca75d09b821c16c1ccb777002a99fccb2d3872f752c6ffa52144731079ee17e1709feffd3b9

    • SSDEEP

      1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oum:7WNqkOJWmo1HpM0MkTUmum

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks