3c5a776c7e7abf44d6a7bb5c6c0969e3d4c57ed678031dff3f5a633852f4c8e2 | Triage

Submit
Reports

Overview

overview

Static

static

7

3c5a776c7e...cs.exe

windows7-x64

7

3c5a776c7e...cs.exe

windows10-2004-x64

Resubmissions

01-07-2024 06:38

240701-hefxmaycje 7

01-07-2024 06:34

240701-hbwhxa1gpr 10

Sharing

General

Target

3c5a776c7e7abf44d6a7bb5c6c0969e3d4c57ed678031dff3f5a633852f4c8e2_NeikiAnalytics.exe
Size

29KB
Sample

240701-hbwhxa1gpr
MD5

05e420248e2819b34f89b09a2f3a2690
SHA1

78e08366afa7bb3bc0daf008eb8c8eb48a33f400
SHA256

3c5a776c7e7abf44d6a7bb5c6c0969e3d4c57ed678031dff3f5a633852f4c8e2
SHA512

9362c37f1a4e7a71873564c74da18c81b5baf9b54a7f00e9cc85a4b75e448535f4fbd8706dd85dca22311960093a15f84df21b43723cb289a4c4a8d928334824
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/YGA:AEwVs+0jNDY1qi/q/A

Score

10^/10

microsoft persistence phishing product:outlook upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

3c5a776c7e7abf44d6a7bb5c6c0969e3d4c57ed678031dff3f5a633852f4c8e2_NeikiAnalytics.exe

Resource

win7-20240611-en

persistence upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

3c5a776c7e7abf44d6a7bb5c6c0969e3d4c57ed678031dff3f5a633852f4c8e2_NeikiAnalytics.exe

Resource

win10v2004-20240611-en

microsoft persistence phishing product:outlook upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  3c5a776c7e7abf44d6a7bb5c6c0969e3d4c57ed678031dff3f5a633852f4c8e2_NeikiAnalytics.exe
- Size
  
  29KB
- MD5
  
  05e420248e2819b34f89b09a2f3a2690
- SHA1
  
  78e08366afa7bb3bc0daf008eb8c8eb48a33f400
- SHA256
  
  3c5a776c7e7abf44d6a7bb5c6c0969e3d4c57ed678031dff3f5a633852f4c8e2
- SHA512
  
  9362c37f1a4e7a71873564c74da18c81b5baf9b54a7f00e9cc85a4b75e448535f4fbd8706dd85dca22311960093a15f84df21b43723cb289a4c4a8d928334824
- SSDEEP
  
  768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/YGA:AEwVs+0jNDY1qi/q/A
Score

10^/10

persistence upx microsoft phishing product:outlook
- Detected microsoft outlook phishing page
  phishing microsoft product:outlook
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishingproduct:outlookupx

© 2018-2024

Terms | Privacy