Overview

overview

8

Static

static

1

3307bdebd5...cs.exe

windows7-x64

8

3307bdebd5...cs.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3307bdebd55d47753e1ee05fdf7d8df4452eb7eea54136f144ff25c1ea6a295b_NeikiAnalytics.exe

  • Size

    79KB

  • Sample

    240701-eap3ysvgje

  • MD5

    30f794a31659eaa8fab0b44b4b62e920

  • SHA1

    33f4072791196d52f5138b484721cdb9e24c8404

  • SHA256

    3307bdebd55d47753e1ee05fdf7d8df4452eb7eea54136f144ff25c1ea6a295b

  • SHA512

    e215685424d555f02dd94c1de03f0e0e63e8ad14007e4e291e60d3b5eb7dda336aec0e590462b96c86e8737b0655a248d7f9fbfd757c187350e7bd5be493acb6

  • SSDEEP

    768:4vw9816vhKQLroX4/wQpWMZ3XOQ69zbjlAAX5e9zz:wEGh0oXloWMZ3izbR9Xwzz

Score
8/10
persistence

Malware Config

Targets

    • Target

      3307bdebd55d47753e1ee05fdf7d8df4452eb7eea54136f144ff25c1ea6a295b_NeikiAnalytics.exe

    • Size

      79KB

    • MD5

      30f794a31659eaa8fab0b44b4b62e920

    • SHA1

      33f4072791196d52f5138b484721cdb9e24c8404

    • SHA256

      3307bdebd55d47753e1ee05fdf7d8df4452eb7eea54136f144ff25c1ea6a295b

    • SHA512

      e215685424d555f02dd94c1de03f0e0e63e8ad14007e4e291e60d3b5eb7dda336aec0e590462b96c86e8737b0655a248d7f9fbfd757c187350e7bd5be493acb6

    • SSDEEP

      768:4vw9816vhKQLroX4/wQpWMZ3XOQ69zbjlAAX5e9zz:wEGh0oXloWMZ3izbR9Xwzz

    Score
    8/10
    persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Active Setup

1
T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Active Setup

1
T1547.014

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks