Overview

overview

7

Static

static

3

c3e41f042a...cs.exe

windows7-x64

7

c3e41f042a...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c3e41f042afbcd99bdfac1b452d4ef30_NeikiAnalytics

  • Size

    32KB

  • Sample

    240514-m4czgsch2s

  • MD5

    c3e41f042afbcd99bdfac1b452d4ef30

  • SHA1

    c9a54a439ee5bcb7cb5a37802257b8abcb1a8034

  • SHA256

    935e90c328141c893c30d89dafe0a6fb4df75733f86189faf7bd1c950e6af26a

  • SHA512

    bc77ffdc35af801fe3a2dc842fd5eed7bc7530f9d08c1a33d5dfb268e8cfde654c7d4355508bcc9e6c7dd054328dac171a5e37c39ecd67dc2f4c717364da77ec

  • SSDEEP

    192:GAGqjRFGKMh9ED/IDExeorm9+Dfp0GjW5sH2t3AIa6abHa5tGbFORoYN:PVR8iQLoFx1jW5sIZR5tGwh

Score
7/10
persistence

Malware Config

Targets

    • Target

      c3e41f042afbcd99bdfac1b452d4ef30_NeikiAnalytics

    • Size

      32KB

    • MD5

      c3e41f042afbcd99bdfac1b452d4ef30

    • SHA1

      c9a54a439ee5bcb7cb5a37802257b8abcb1a8034

    • SHA256

      935e90c328141c893c30d89dafe0a6fb4df75733f86189faf7bd1c950e6af26a

    • SHA512

      bc77ffdc35af801fe3a2dc842fd5eed7bc7530f9d08c1a33d5dfb268e8cfde654c7d4355508bcc9e6c7dd054328dac171a5e37c39ecd67dc2f4c717364da77ec

    • SSDEEP

      192:GAGqjRFGKMh9ED/IDExeorm9+Dfp0GjW5sH2t3AIa6abHa5tGbFORoYN:PVR8iQLoFx1jW5sIZR5tGwh

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks