Overview

overview

7

Static

static

3

3dbe56c03c...cs.exe

windows7-x64

7

3dbe56c03c...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dbe56c03c39b1b306e98bfd06b87c60_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240522-z5axqshb55

  • MD5

    3dbe56c03c39b1b306e98bfd06b87c60

  • SHA1

    763003fd6f23df8e3ff752affc7f7e056d98785c

  • SHA256

    e09f83478dc9ef34e7161e3b905a251984d4d4e98b8bedaf18c0a7e1a21f1b99

  • SHA512

    f7da86cb6fcf77744819a8a948764c9edf094eba80e5d7a46b0060904aaaba15c09b172ac8f05b3ab3cf29de571516a0a55912362283794f6d292ef1c1423270

  • SSDEEP

    384:zL7li/2ztq2DcEQvdQcJKLTp/NK9xaZh:XtMCQ9cZh

Score
7/10

Malware Config

Targets

    • Target

      3dbe56c03c39b1b306e98bfd06b87c60_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      3dbe56c03c39b1b306e98bfd06b87c60

    • SHA1

      763003fd6f23df8e3ff752affc7f7e056d98785c

    • SHA256

      e09f83478dc9ef34e7161e3b905a251984d4d4e98b8bedaf18c0a7e1a21f1b99

    • SHA512

      f7da86cb6fcf77744819a8a948764c9edf094eba80e5d7a46b0060904aaaba15c09b172ac8f05b3ab3cf29de571516a0a55912362283794f6d292ef1c1423270

    • SSDEEP

      384:zL7li/2ztq2DcEQvdQcJKLTp/NK9xaZh:XtMCQ9cZh

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks