Overview

overview

7

Static

static

3

daa0dcfa7f...cs.exe

windows7-x64

7

daa0dcfa7f...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    daa0dcfa7fd4104a26897fef6ca0bf90_NeikiAnalytics

  • Size

    289KB

  • Sample

    240510-n82dbadc3s

  • MD5

    daa0dcfa7fd4104a26897fef6ca0bf90

  • SHA1

    bb8177e1de4cf85bc8827547d8e5ac6f41e271b2

  • SHA256

    8e8bb101a5d4fa20b6c48d965827ff065125639ce6433105b81402cdf8e872a4

  • SHA512

    b084c031d032f1d547f7783f8bd4553a7bb44e89029a6e8419160b1bd9e04f5e06bfbc2640b545a1766c3ba925916b06498d5676d6f770f59ac043670e2225f8

  • SSDEEP

    6144:gblyesukYZdvrniRfBgM1HSk03Ck4YukECzJLaQVbU5:gJ7Z5rnIHSk03Ck7uklJLJbU5

Score
7/10

Malware Config

Targets

    • Target

      daa0dcfa7fd4104a26897fef6ca0bf90_NeikiAnalytics

    • Size

      289KB

    • MD5

      daa0dcfa7fd4104a26897fef6ca0bf90

    • SHA1

      bb8177e1de4cf85bc8827547d8e5ac6f41e271b2

    • SHA256

      8e8bb101a5d4fa20b6c48d965827ff065125639ce6433105b81402cdf8e872a4

    • SHA512

      b084c031d032f1d547f7783f8bd4553a7bb44e89029a6e8419160b1bd9e04f5e06bfbc2640b545a1766c3ba925916b06498d5676d6f770f59ac043670e2225f8

    • SSDEEP

      6144:gblyesukYZdvrniRfBgM1HSk03Ck4YukECzJLaQVbU5:gJ7Z5rnIHSk03Ck7uklJLJbU5

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks