Overview

overview

7

Static

static

3

112ca0b73b...cs.exe

windows7-x64

7

112ca0b73b...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    112ca0b73bfe609c70672e0254aefd00_NeikiAnalytics

  • Size

    12KB

  • Sample

    240510-syylwscg7t

  • MD5

    112ca0b73bfe609c70672e0254aefd00

  • SHA1

    8bab4131e97517048efcdd646ae918381a0a6013

  • SHA256

    9edbd31f8775ea76c21b4710578e1c0385ed5c8c53faa674f7a07069d72efac2

  • SHA512

    eb4217de61f8fcb1b1f32c480f7bf321cfc28cf24e2f7ec5fd7083f1d7f53f59cb7e3979d011ad950ac9ba42e7647c2e6817f608f29967f996d25a2719070a68

  • SSDEEP

    384:DL7li/2ziq2DcEQvdhcJKLTp/NK9xaY+th:HSM/Q9cY+th

Score
7/10

Malware Config

Targets

    • Target

      112ca0b73bfe609c70672e0254aefd00_NeikiAnalytics

    • Size

      12KB

    • MD5

      112ca0b73bfe609c70672e0254aefd00

    • SHA1

      8bab4131e97517048efcdd646ae918381a0a6013

    • SHA256

      9edbd31f8775ea76c21b4710578e1c0385ed5c8c53faa674f7a07069d72efac2

    • SHA512

      eb4217de61f8fcb1b1f32c480f7bf321cfc28cf24e2f7ec5fd7083f1d7f53f59cb7e3979d011ad950ac9ba42e7647c2e6817f608f29967f996d25a2719070a68

    • SSDEEP

      384:DL7li/2ziq2DcEQvdhcJKLTp/NK9xaY+th:HSM/Q9cY+th

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks