General

  • Target

    135a581809e4c6524cd94c306d5e2ec0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240516-xftbnsag9x

  • MD5

    135a581809e4c6524cd94c306d5e2ec0

  • SHA1

    fb1cc9b35f7348810c4399d7919124b7cf628ad4

  • SHA256

    45f069da4b1091b44d2053fa462dda9d661dcc08755c6e8d9bc75a8a083d2130

  • SHA512

    dfc683c552e8c8eb2d101a2b900e4337f586bc78b653f7008119b4fa93149a827a7e7cb3391989ee0dbc1b289768a5a31b74b5abd99f58f1c3788b2b6bd915a2

  • SSDEEP

    384:OL7li/2z7q2DcEQvdhcJKLTp/NK9xaWC:YXM/Q9cWC

Score
7/10

Malware Config

Targets

    • Target

      135a581809e4c6524cd94c306d5e2ec0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      135a581809e4c6524cd94c306d5e2ec0

    • SHA1

      fb1cc9b35f7348810c4399d7919124b7cf628ad4

    • SHA256

      45f069da4b1091b44d2053fa462dda9d661dcc08755c6e8d9bc75a8a083d2130

    • SHA512

      dfc683c552e8c8eb2d101a2b900e4337f586bc78b653f7008119b4fa93149a827a7e7cb3391989ee0dbc1b289768a5a31b74b5abd99f58f1c3788b2b6bd915a2

    • SSDEEP

      384:OL7li/2z7q2DcEQvdhcJKLTp/NK9xaWC:YXM/Q9cWC

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks