Overview

overview

10

Static

static

3

1de0d2f56e...cs.exe

windows7-x64

10

1de0d2f56e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1de0d2f56e61a044f68fcb9bd111982a6c68bbcefc0587e81e9495bacecb7232_NeikiAnalytics.exe

  • Size

    3.5MB

  • Sample

    240630-12leqszhkq

  • MD5

    e96f5b3730e7b90512efb76120718ac0

  • SHA1

    20e74ac3342fc556a478d5c996532e6f664f3952

  • SHA256

    1de0d2f56e61a044f68fcb9bd111982a6c68bbcefc0587e81e9495bacecb7232

  • SHA512

    c65bb48f47d46f954949c65d517d382dd4cea21eb2684a7282fdae36b9afb8d8d5c7e9e933da1709013cf2291b5778e7d285f86fc2921f6412627703943f61f8

  • SSDEEP

    98304:P66Nzf0vCNnowJAHzdZHG6efh3Bbob3+mFiP:7NTD+pZHG6efh3BDm0P

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1de0d2f56e61a044f68fcb9bd111982a6c68bbcefc0587e81e9495bacecb7232_NeikiAnalytics.exe

    • Size

      3.5MB

    • MD5

      e96f5b3730e7b90512efb76120718ac0

    • SHA1

      20e74ac3342fc556a478d5c996532e6f664f3952

    • SHA256

      1de0d2f56e61a044f68fcb9bd111982a6c68bbcefc0587e81e9495bacecb7232

    • SHA512

      c65bb48f47d46f954949c65d517d382dd4cea21eb2684a7282fdae36b9afb8d8d5c7e9e933da1709013cf2291b5778e7d285f86fc2921f6412627703943f61f8

    • SSDEEP

      98304:P66Nzf0vCNnowJAHzdZHG6efh3Bbob3+mFiP:7NTD+pZHG6efh3BDm0P

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks