45847e0fdce3567567587a1cd446b28de1095670fb23b960f2193641b843d36e | Triage

Submit
Reports

Overview

overview

Static

static

3

45847e0fdc...cs.exe

windows7-x64

7

45847e0fdc...cs.exe

windows10-2004-x64

Sharing

General

Target

45847e0fdce3567567587a1cd446b28de1095670fb23b960f2193641b843d36e_NeikiAnalytics.exe
Size

42KB
Sample

240702-l39fma1dql
MD5

3a4e6f22a46b5376d1a5a522701333d0
SHA1

3fd76881fa6949be3d7b79677b31eefd9443f932
SHA256

45847e0fdce3567567587a1cd446b28de1095670fb23b960f2193641b843d36e
SHA512

9daaf382d9872fc9ca149f6ae9842e7d889d9e3e2460aa12883dea2ddddbb3768f4c0a87df325ab7ce4b482a592dce3dc0a7acbf687de2a5659c16f59ac4ba41
SSDEEP

768:tdAkXGqv1GypfcHrk1DqAHNS/BHPmeWcTeYdC9VOV0rxAdeVwB:tdAkXGqECcwYgw9PNSa0GXB

Score

10^/10

microsoft persistence phishing product:outlook upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

45847e0fdce3567567587a1cd446b28de1095670fb23b960f2193641b843d36e_NeikiAnalytics.exe

Resource

win7-20240221-en

persistence upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

45847e0fdce3567567587a1cd446b28de1095670fb23b960f2193641b843d36e_NeikiAnalytics.exe

Resource

win10v2004-20240508-en

microsoft persistence phishing product:outlook upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  45847e0fdce3567567587a1cd446b28de1095670fb23b960f2193641b843d36e_NeikiAnalytics.exe
- Size
  
  42KB
- MD5
  
  3a4e6f22a46b5376d1a5a522701333d0
- SHA1
  
  3fd76881fa6949be3d7b79677b31eefd9443f932
- SHA256
  
  45847e0fdce3567567587a1cd446b28de1095670fb23b960f2193641b843d36e
- SHA512
  
  9daaf382d9872fc9ca149f6ae9842e7d889d9e3e2460aa12883dea2ddddbb3768f4c0a87df325ab7ce4b482a592dce3dc0a7acbf687de2a5659c16f59ac4ba41
- SSDEEP
  
  768:tdAkXGqv1GypfcHrk1DqAHNS/BHPmeWcTeYdC9VOV0rxAdeVwB:tdAkXGqECcwYgw9PNSa0GXB
Score

10^/10

persistence upx microsoft phishing product:outlook
- Detected microsoft outlook phishing page
  phishing microsoft product:outlook
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

microsoftpersistencephishingproduct:outlookupx

© 2018-2024

Terms | Privacy