Overview

overview

7

Static

static

3

ba01496504...cs.exe

windows7-x64

7

ba01496504...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ba014965049437316f82f97ff7e01fa0_NeikiAnalytics

  • Size

    38KB

  • Sample

    240513-qnpj5ahb58

  • MD5

    ba014965049437316f82f97ff7e01fa0

  • SHA1

    182b5d835ed7e3b3bf1cd7475bd5421f3c37361b

  • SHA256

    1e47734bed1fa9a79d09911734b01e9809d05f81ee2403714a4562b3f07c5398

  • SHA512

    0534b49d72be7ee75531366fe733b2aa57ac19ea1a05190d8911b4e60a36f12c519447bee97aec972b11531d9d26fcb80150150952f22eff1e03ba3ddb91de68

  • SSDEEP

    768:4c3C4zd6wl2oVZ3eNU6+qbs8ERJe4vzNT6oG57pHHIzniSfRZt+fkyR+i4HvG0T:4OHdYoVZuNUsdJmNLmHIzniSfrtu94HF

Score
7/10
persistence

Malware Config

Targets

    • Target

      ba014965049437316f82f97ff7e01fa0_NeikiAnalytics

    • Size

      38KB

    • MD5

      ba014965049437316f82f97ff7e01fa0

    • SHA1

      182b5d835ed7e3b3bf1cd7475bd5421f3c37361b

    • SHA256

      1e47734bed1fa9a79d09911734b01e9809d05f81ee2403714a4562b3f07c5398

    • SHA512

      0534b49d72be7ee75531366fe733b2aa57ac19ea1a05190d8911b4e60a36f12c519447bee97aec972b11531d9d26fcb80150150952f22eff1e03ba3ddb91de68

    • SSDEEP

      768:4c3C4zd6wl2oVZ3eNU6+qbs8ERJe4vzNT6oG57pHHIzniSfRZt+fkyR+i4HvG0T:4OHdYoVZuNUsdJmNLmHIzniSfrtu94HF

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks