Overview

overview

10

Static

static

3

4c5172edb3...cs.exe

windows7-x64

10

4c5172edb3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4c5172edb370dedd293e711642e6384779f0bfaa5b1535c1114d35ed50b09272_NeikiAnalytics.exe

  • Size

    128KB

  • Sample

    240701-myxrps1alq

  • MD5

    f4be17cbf07f464c7119e26b7139c2b0

  • SHA1

    5def849b8419e16cd8a16f7411a613b9966017b1

  • SHA256

    4c5172edb370dedd293e711642e6384779f0bfaa5b1535c1114d35ed50b09272

  • SHA512

    ce7db68a851d79f92cd9fd1fb4a48fbdd92968572798447845541a257ca72f6432e2d86c7cc04791a161683540dad698cdbc01097ac6f7cdeaf56048ee5e50e9

  • SSDEEP

    1536:bPuMT/hgToGpQGx32wkO0MH4UQjILQ9FKGXllUDtM60TD4ruhiZlrQIFiglF9xZM:aML7GJxJkOl4LKG7UDd0pCrQIFdFtLQ

Score
10/10
persistence

Malware Config

Targets

    • Target

      4c5172edb370dedd293e711642e6384779f0bfaa5b1535c1114d35ed50b09272_NeikiAnalytics.exe

    • Size

      128KB

    • MD5

      f4be17cbf07f464c7119e26b7139c2b0

    • SHA1

      5def849b8419e16cd8a16f7411a613b9966017b1

    • SHA256

      4c5172edb370dedd293e711642e6384779f0bfaa5b1535c1114d35ed50b09272

    • SHA512

      ce7db68a851d79f92cd9fd1fb4a48fbdd92968572798447845541a257ca72f6432e2d86c7cc04791a161683540dad698cdbc01097ac6f7cdeaf56048ee5e50e9

    • SSDEEP

      1536:bPuMT/hgToGpQGx32wkO0MH4UQjILQ9FKGXllUDtM60TD4ruhiZlrQIFiglF9xZM:aML7GJxJkOl4LKG7UDd0pCrQIFdFtLQ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks