Overview

overview

10

Static

static

3

3453af005d...cs.exe

windows7-x64

10

3453af005d...cs.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3453af005da4e456947101c1c173ef4c86cc02e4dad0b0ce1b43bfb4db0033b1_NeikiAnalytics.exe

  • Size

    400KB

  • Sample

    240701-eq6qmsyhjj

  • MD5

    c6975704367083ac62d156de7e1b6550

  • SHA1

    6f4e2e71e110d8cb39d64e3e2d43bd922e453ffb

  • SHA256

    3453af005da4e456947101c1c173ef4c86cc02e4dad0b0ce1b43bfb4db0033b1

  • SHA512

    74ce685fc6ad99e44dcb6555a9435a3f9a8b7299af3e3d2a106b3e27fd5ec28d9c9efaffe8f269dae05b01568940a41c816ff7a56ba5bd3312c6fbaa73c93480

  • SSDEEP

    12288:pHVFYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:pHHYJ07kE0KoFtw2gu9RxrBIUbPLwH9n

Score
10/10
persistence

Malware Config

Targets

    • Target

      3453af005da4e456947101c1c173ef4c86cc02e4dad0b0ce1b43bfb4db0033b1_NeikiAnalytics.exe

    • Size

      400KB

    • MD5

      c6975704367083ac62d156de7e1b6550

    • SHA1

      6f4e2e71e110d8cb39d64e3e2d43bd922e453ffb

    • SHA256

      3453af005da4e456947101c1c173ef4c86cc02e4dad0b0ce1b43bfb4db0033b1

    • SHA512

      74ce685fc6ad99e44dcb6555a9435a3f9a8b7299af3e3d2a106b3e27fd5ec28d9c9efaffe8f269dae05b01568940a41c816ff7a56ba5bd3312c6fbaa73c93480

    • SSDEEP

      12288:pHVFYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:pHHYJ07kE0KoFtw2gu9RxrBIUbPLwH9n

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks