Overview

overview

10

Static

static

7

492589e687...cs.exe

windows7-x64

7

492589e687...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    492589e6874b3bd1b7ba9f4cf722ef06c9eba644a07f3046ba51b8c48b13f554_NeikiAnalytics.exe

  • Size

    41KB

  • Sample

    240701-l2pd3avepb

  • MD5

    b9bf43dc48e29539b7e37728cdd77b70

  • SHA1

    95840dfeb95a41334402406aedb8ec8e9d04eb6f

  • SHA256

    492589e6874b3bd1b7ba9f4cf722ef06c9eba644a07f3046ba51b8c48b13f554

  • SHA512

    aa4b9e1e190640671727006849b8ba74b9dc9e491c3a7ad41d633eb26f4096dcfd9e0dbe06fc57f42bf219b2a90bd6a9ef14d3b79b9f3784596ccb63c9fc6994

  • SSDEEP

    768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

Score
10/10
microsoftpersistencephishingproduct:outlookupx

Malware Config

Targets

    • Target

      492589e6874b3bd1b7ba9f4cf722ef06c9eba644a07f3046ba51b8c48b13f554_NeikiAnalytics.exe

    • Size

      41KB

    • MD5

      b9bf43dc48e29539b7e37728cdd77b70

    • SHA1

      95840dfeb95a41334402406aedb8ec8e9d04eb6f

    • SHA256

      492589e6874b3bd1b7ba9f4cf722ef06c9eba644a07f3046ba51b8c48b13f554

    • SHA512

      aa4b9e1e190640671727006849b8ba74b9dc9e491c3a7ad41d633eb26f4096dcfd9e0dbe06fc57f42bf219b2a90bd6a9ef14d3b79b9f3784596ccb63c9fc6994

    • SSDEEP

      768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/:AEwVs+0jNDY1qi/q

    Score
    10/10
    persistenceupxmicrosoftphishingproduct:outlook
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

2
T1112

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks