Overview

overview

10

Static

static

3

b0cfb2e39d...cs.exe

windows7-x64

10

b0cfb2e39d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0cfb2e39d08a14f4d3d486c538b30337e72c98ea7b00df65f6150ed63d92b80_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240629-snar3sshrp

  • MD5

    c2d48119668725e864cb7624d6778cf0

  • SHA1

    56dd4300a9ee62fd0aeb4a843cc59538bbddbd93

  • SHA256

    b0cfb2e39d08a14f4d3d486c538b30337e72c98ea7b00df65f6150ed63d92b80

  • SHA512

    66c51fc76716276b57859915e09a2682c41ade1a661b0c87db146f6617f5c27c9432530e6736a0cfc6e38cda3ab13dbd8f72739b68581fe0bcb038071d02f830

  • SSDEEP

    12288:QpMB4Qct1pHCXwpnsKvNA+XTvZHWuEo3oWbvrec:uMkHlpsKv2EvZHp3oWbvrec

Score
10/10
persistence

Malware Config

Targets

    • Target

      b0cfb2e39d08a14f4d3d486c538b30337e72c98ea7b00df65f6150ed63d92b80_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      c2d48119668725e864cb7624d6778cf0

    • SHA1

      56dd4300a9ee62fd0aeb4a843cc59538bbddbd93

    • SHA256

      b0cfb2e39d08a14f4d3d486c538b30337e72c98ea7b00df65f6150ed63d92b80

    • SHA512

      66c51fc76716276b57859915e09a2682c41ade1a661b0c87db146f6617f5c27c9432530e6736a0cfc6e38cda3ab13dbd8f72739b68581fe0bcb038071d02f830

    • SSDEEP

      12288:QpMB4Qct1pHCXwpnsKvNA+XTvZHWuEo3oWbvrec:uMkHlpsKv2EvZHp3oWbvrec

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks