Overview

overview

7

Static

static

3

cfb7a9b298...cs.exe

windows7-x64

7

cfb7a9b298...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfb7a9b2985c58e07fc4b91076282c60_NeikiAnalytics

  • Size

    1.6MB

  • Sample

    240510-nelqrsbc7t

  • MD5

    cfb7a9b2985c58e07fc4b91076282c60

  • SHA1

    e787162f01c2c5750daf1f3d8bd6d42190a09aab

  • SHA256

    e5f16db07ad2ca38ce099d6532efd1738c0304e7a7bd7f7b3792cdf4257a190a

  • SHA512

    771b0474c9c00ec2026003edb92a7d1b5193eda7fb5a16adb34b7bd63cf6be8fb14dc6e8ec9ee55301a3276a737ede94fdafc3049fad21382d0756cbd4e5ec03

  • SSDEEP

    49152:YCGeQD9oMmmxvhCcD0Tgy0LXu1qoTzmYvr6/TG:YCVQD9ymxvkcD+v49pN/q

Score
7/10

Malware Config

Targets

    • Target

      cfb7a9b2985c58e07fc4b91076282c60_NeikiAnalytics

    • Size

      1.6MB

    • MD5

      cfb7a9b2985c58e07fc4b91076282c60

    • SHA1

      e787162f01c2c5750daf1f3d8bd6d42190a09aab

    • SHA256

      e5f16db07ad2ca38ce099d6532efd1738c0304e7a7bd7f7b3792cdf4257a190a

    • SHA512

      771b0474c9c00ec2026003edb92a7d1b5193eda7fb5a16adb34b7bd63cf6be8fb14dc6e8ec9ee55301a3276a737ede94fdafc3049fad21382d0756cbd4e5ec03

    • SSDEEP

      49152:YCGeQD9oMmmxvhCcD0Tgy0LXu1qoTzmYvr6/TG:YCVQD9ymxvkcD+v49pN/q

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks