Overview

overview

8

Static

static

7

35b414ef0a...cs.dll

windows7-x64

7

35b414ef0a...cs.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35b414ef0a92c62573cc3105d176390ff0c02447dcc0469b0daf4c83c9b30cbc_NeikiAnalytics.exe

  • Size

    76KB

  • Sample

    240701-e8cwaawfpf

  • MD5

    fa45d27ac042a1bc4bb5d91a9e22a040

  • SHA1

    6e3bb434dc80f527d1d8d65a2346aeb22cf2435a

  • SHA256

    35b414ef0a92c62573cc3105d176390ff0c02447dcc0469b0daf4c83c9b30cbc

  • SHA512

    b540b731958b207abd6a86eb8011ba20fcad6212a78afee9666ebb8fab4f37f44eae8e563f8b44e6c4367f1b769aa74c780a37a08975dc927e774d95ef8d85e2

  • SSDEEP

    1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZRdla91:c8y93KQjy7G55riF1cMo03J091

Score
8/10
persistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      35b414ef0a92c62573cc3105d176390ff0c02447dcc0469b0daf4c83c9b30cbc_NeikiAnalytics.exe

    • Size

      76KB

    • MD5

      fa45d27ac042a1bc4bb5d91a9e22a040

    • SHA1

      6e3bb434dc80f527d1d8d65a2346aeb22cf2435a

    • SHA256

      35b414ef0a92c62573cc3105d176390ff0c02447dcc0469b0daf4c83c9b30cbc

    • SHA512

      b540b731958b207abd6a86eb8011ba20fcad6212a78afee9666ebb8fab4f37f44eae8e563f8b44e6c4367f1b769aa74c780a37a08975dc927e774d95ef8d85e2

    • SSDEEP

      1536:YjV8y93KQpFQmPLRk7G50zy/riF12jvRyo0hQk7ZRdla91:c8y93KQjy7G55riF1cMo03J091

    Score
    8/10
    upxpersistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Event Triggered Execution

1
T1546

AppInit DLLs

1
T1546.010

Privilege Escalation

Event Triggered Execution

1
T1546

AppInit DLLs

1
T1546.010

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks