Overview

overview

7

Static

static

3

e3acea2c86...cs.exe

windows7-x64

7

e3acea2c86...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e3acea2c86f00e7e80b2494fefe210c0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240520-l31tgsee64

  • MD5

    e3acea2c86f00e7e80b2494fefe210c0

  • SHA1

    626966dded35bd56b1eb4382bac9adc24669b31e

  • SHA256

    c7190d27b7fa474d280802c5e614bd537738ad226c410b026024d7ef80adfb95

  • SHA512

    454df15e760a0c67c7c1cc1779dc79d80578063b4df599f703ba2115a7c10aad67a1d5d06dd2b2a6475e4a705110af8eb6612252ba32989839ad0743a2fb3067

  • SSDEEP

    384:fL7li/2zjq2DcEQvdhcJKLTp/NK9xa/y:THM/Q9c/y

Score
7/10

Malware Config

Targets

    • Target

      e3acea2c86f00e7e80b2494fefe210c0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      e3acea2c86f00e7e80b2494fefe210c0

    • SHA1

      626966dded35bd56b1eb4382bac9adc24669b31e

    • SHA256

      c7190d27b7fa474d280802c5e614bd537738ad226c410b026024d7ef80adfb95

    • SHA512

      454df15e760a0c67c7c1cc1779dc79d80578063b4df599f703ba2115a7c10aad67a1d5d06dd2b2a6475e4a705110af8eb6612252ba32989839ad0743a2fb3067

    • SSDEEP

      384:fL7li/2zjq2DcEQvdhcJKLTp/NK9xa/y:THM/Q9c/y

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks