Overview

overview

10

Static

static

3

b9aeac8f43...cs.exe

windows7-x64

10

b9aeac8f43...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b9aeac8f43184efc2cc75d6da5fcc967f6f7fa4f0ed499af471b26ababfd574d_NeikiAnalytics.exe

  • Size

    741KB

  • Sample

    240629-ynwbnsyajr

  • MD5

    9d5ca5707818ea88dd6c0a7d15329530

  • SHA1

    6897dc5cf40878f91c7839329459e169a98b7f8d

  • SHA256

    b9aeac8f43184efc2cc75d6da5fcc967f6f7fa4f0ed499af471b26ababfd574d

  • SHA512

    7cea3256443cdc72cd8b6f79fb2d820143e97a130b4c59c830d26c60b0a4a2f9087c9b111808a27a2b8378f55ee65aee712aee3efe198d0cdeed61f295ada98d

  • SSDEEP

    12288:ltTuhrf45I8jWtJ8OgL27rd69bk5NCgGhSFB79gYhLIf6EQ9EYcw1Fa:lIt4kt0Kd6F6CNzYhUiEWEYcwi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b9aeac8f43184efc2cc75d6da5fcc967f6f7fa4f0ed499af471b26ababfd574d_NeikiAnalytics.exe

    • Size

      741KB

    • MD5

      9d5ca5707818ea88dd6c0a7d15329530

    • SHA1

      6897dc5cf40878f91c7839329459e169a98b7f8d

    • SHA256

      b9aeac8f43184efc2cc75d6da5fcc967f6f7fa4f0ed499af471b26ababfd574d

    • SHA512

      7cea3256443cdc72cd8b6f79fb2d820143e97a130b4c59c830d26c60b0a4a2f9087c9b111808a27a2b8378f55ee65aee712aee3efe198d0cdeed61f295ada98d

    • SSDEEP

      12288:ltTuhrf45I8jWtJ8OgL27rd69bk5NCgGhSFB79gYhLIf6EQ9EYcw1Fa:lIt4kt0Kd6F6CNzYhUiEWEYcwi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks