Overview

overview

10

Static

static

3

6ebab2825e...cs.exe

windows7-x64

10

6ebab2825e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ebab2825e2ff5da74c6e36daac825560fc3e51b401bdf2a6f0547333c58fff5_NeikiAnalytics.exe

  • Size

    104KB

  • Sample

    240629-gf456svfqr

  • MD5

    faaaec08bff9e9a4c394fb8bf7258a30

  • SHA1

    a05c5563eaf05dd28b7135849c574446b77aa002

  • SHA256

    6ebab2825e2ff5da74c6e36daac825560fc3e51b401bdf2a6f0547333c58fff5

  • SHA512

    5aafcf6b672ed2e944ecb0a257fd5155f9018d7dc7cffced9ec03e0f2c4c2b2f481c616bba989d2e266312a7ed14a3ea8b0a160730688a26eac85fb012b7d16c

  • SSDEEP

    3072:LobDlqp+/fHGWG86v2zYl6N3kremwc/gHq/e:sflqp+/9n68I6N3/fc/A

Score
10/10
persistence

Malware Config

Targets

    • Target

      6ebab2825e2ff5da74c6e36daac825560fc3e51b401bdf2a6f0547333c58fff5_NeikiAnalytics.exe

    • Size

      104KB

    • MD5

      faaaec08bff9e9a4c394fb8bf7258a30

    • SHA1

      a05c5563eaf05dd28b7135849c574446b77aa002

    • SHA256

      6ebab2825e2ff5da74c6e36daac825560fc3e51b401bdf2a6f0547333c58fff5

    • SHA512

      5aafcf6b672ed2e944ecb0a257fd5155f9018d7dc7cffced9ec03e0f2c4c2b2f481c616bba989d2e266312a7ed14a3ea8b0a160730688a26eac85fb012b7d16c

    • SSDEEP

      3072:LobDlqp+/fHGWG86v2zYl6N3kremwc/gHq/e:sflqp+/9n68I6N3/fc/A

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks