Overview

overview

7

Static

static

3

3f22f753c4...cs.exe

windows7-x64

7

3f22f753c4...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f22f753c419fd1f4d5894f6693b31b0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240522-z8nb8shc3t

  • MD5

    3f22f753c419fd1f4d5894f6693b31b0

  • SHA1

    a57812918b085d556a37011adaa55675be06b291

  • SHA256

    4ce5a4ac90804f6d13a6fed33c862b7cf8cab1854887bff52b5d47db00962a3c

  • SHA512

    a611af4940e3aada240e2c881d02a44e7b8c478a4ca61e8a3f88d690bb5fb7ec8a136c06b2106942ef2aed2c3001518deebc9b08bb5a3cbb9b465ababcd2b174

  • SSDEEP

    384:DL7li/2zyJq2DcEQvdhcJKLTp/NK9xaIr:H0M/Q9cIr

Score
7/10

Malware Config

Targets

    • Target

      3f22f753c419fd1f4d5894f6693b31b0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      3f22f753c419fd1f4d5894f6693b31b0

    • SHA1

      a57812918b085d556a37011adaa55675be06b291

    • SHA256

      4ce5a4ac90804f6d13a6fed33c862b7cf8cab1854887bff52b5d47db00962a3c

    • SHA512

      a611af4940e3aada240e2c881d02a44e7b8c478a4ca61e8a3f88d690bb5fb7ec8a136c06b2106942ef2aed2c3001518deebc9b08bb5a3cbb9b465ababcd2b174

    • SSDEEP

      384:DL7li/2zyJq2DcEQvdhcJKLTp/NK9xaIr:H0M/Q9cIr

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks