Overview

overview

8

Static

static

3

b467f090a8...cs.exe

windows7-x64

7

b467f090a8...cs.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    b467f090a851a05d39824c82dee8476391f20d3366ad9b533476ca5fa09376b2_NeikiAnalytics.exe

  • Size

    730KB

  • Sample

    240629-vnzgjs1grb

  • MD5

    c0b808c9d48c5649f2ebcfde40434ad0

  • SHA1

    de99a41aa62bc4bc151c36498d17a9fb3a26d42f

  • SHA256

    b467f090a851a05d39824c82dee8476391f20d3366ad9b533476ca5fa09376b2

  • SHA512

    9d547f38f364b2bbc2769a8d57b37abb1ad90b896d5201a5171ba99efb0dd9da677fdaf3a047be8cd343ac2da4eb366e129817dcf89bc654b044a5426e89c3f6

  • SSDEEP

    12288:BlQ9IP2EyZz77XC1eVr1ltXifnTfExyR823XTjsXZ6M6CHvHnRgF8+3ZxBjvrEHz:BlQiPI7LCeV5LXi7f4yx3XfyZ6M685gU

Score
8/10
persistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      b467f090a851a05d39824c82dee8476391f20d3366ad9b533476ca5fa09376b2_NeikiAnalytics.exe

    • Size

      730KB

    • MD5

      c0b808c9d48c5649f2ebcfde40434ad0

    • SHA1

      de99a41aa62bc4bc151c36498d17a9fb3a26d42f

    • SHA256

      b467f090a851a05d39824c82dee8476391f20d3366ad9b533476ca5fa09376b2

    • SHA512

      9d547f38f364b2bbc2769a8d57b37abb1ad90b896d5201a5171ba99efb0dd9da677fdaf3a047be8cd343ac2da4eb366e129817dcf89bc654b044a5426e89c3f6

    • SSDEEP

      12288:BlQ9IP2EyZz77XC1eVr1ltXifnTfExyR823XTjsXZ6M6CHvHnRgF8+3ZxBjvrEHz:BlQiPI7LCeV5LXi7f4yx3XfyZ6M685gU

    Score
    8/10
    upxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks