Overview

overview

10

Static

static

3

20d04c42de...cs.exe

windows7-x64

10

20d04c42de...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    20d04c42de5fcb8f7e5994d6b1b2ae0788a2f66ff53876166c6e1f3970131cac_NeikiAnalytics.exe

  • Size

    96KB

  • Sample

    240630-2xhnqayaph

  • MD5

    048afcd5a29c978c2c71ff0bead511f0

  • SHA1

    3ae897810054175c23d0a13a11a2f6c0d460ba61

  • SHA256

    20d04c42de5fcb8f7e5994d6b1b2ae0788a2f66ff53876166c6e1f3970131cac

  • SHA512

    f211a7e298bf6e9619f6e1d3b3defb8df66d3e92091e38d46c4d900adc6ce92f85a6851ba0a219101ff72ff3fb4d95173c7c3809eb6e038268816c363a06a564

  • SSDEEP

    1536:9onVGvBevTiSpk5MAVC2z3/q4BVcdZ2JVQBKoC/CKniTCvVAva61hLDnePhVsWz2:6nVeevlq5lVC2O4BVqZ2fQkbn1vVAvai

Score
10/10
persistence

Malware Config

Targets

    • Target

      20d04c42de5fcb8f7e5994d6b1b2ae0788a2f66ff53876166c6e1f3970131cac_NeikiAnalytics.exe

    • Size

      96KB

    • MD5

      048afcd5a29c978c2c71ff0bead511f0

    • SHA1

      3ae897810054175c23d0a13a11a2f6c0d460ba61

    • SHA256

      20d04c42de5fcb8f7e5994d6b1b2ae0788a2f66ff53876166c6e1f3970131cac

    • SHA512

      f211a7e298bf6e9619f6e1d3b3defb8df66d3e92091e38d46c4d900adc6ce92f85a6851ba0a219101ff72ff3fb4d95173c7c3809eb6e038268816c363a06a564

    • SSDEEP

      1536:9onVGvBevTiSpk5MAVC2z3/q4BVcdZ2JVQBKoC/CKniTCvVAva61hLDnePhVsWz2:6nVeevlq5lVC2O4BVqZ2fQkbn1vVAvai

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks