Overview

overview

7

Static

static

3

59f9b9d18e...cs.exe

windows7-x64

7

59f9b9d18e...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59f9b9d18ecf8174ddf73df6b83c4360_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240522-3pn17sde97

  • MD5

    59f9b9d18ecf8174ddf73df6b83c4360

  • SHA1

    5d8ce270059ebb4ea2d2be2b21b7b5ca5bcca255

  • SHA256

    9ec80e53e50bb1f8114eb1c7f48c2879e4c564af5a999bea4886cd755b7e49e8

  • SHA512

    ba829380e2b2a03166da79750f06da6514a528f99c3d6ecf543e93e377cb67d1ca40d50afbb1f7b22c9eef20ae1400aedf572866b9635ce0c7a7d7773d0eb22c

  • SSDEEP

    384:DL7li/2zZq2DcEQvdhcJKLTp/NK9xa8E:H5M/Q9c8E

Score
7/10

Malware Config

Targets

    • Target

      59f9b9d18ecf8174ddf73df6b83c4360_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      59f9b9d18ecf8174ddf73df6b83c4360

    • SHA1

      5d8ce270059ebb4ea2d2be2b21b7b5ca5bcca255

    • SHA256

      9ec80e53e50bb1f8114eb1c7f48c2879e4c564af5a999bea4886cd755b7e49e8

    • SHA512

      ba829380e2b2a03166da79750f06da6514a528f99c3d6ecf543e93e377cb67d1ca40d50afbb1f7b22c9eef20ae1400aedf572866b9635ce0c7a7d7773d0eb22c

    • SSDEEP

      384:DL7li/2zZq2DcEQvdhcJKLTp/NK9xa8E:H5M/Q9c8E

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks