Overview

overview

7

Static

static

3

5eb74bdd1a...cs.exe

windows7-x64

7

5eb74bdd1a...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5eb74bdd1acfd53a0ab4ca3bdb73e030_NeikiAnalytics.exe

  • Size

    95KB

  • Sample

    240523-ae97gaeb8y

  • MD5

    5eb74bdd1acfd53a0ab4ca3bdb73e030

  • SHA1

    953f45eac593dffdcd71f24f8871ff7569bba2ea

  • SHA256

    ac431ed41314c7a919cd1e0b7e6b60a9b96a84a4358463eaabc3b2a3481b93a5

  • SHA512

    4df7faded6f202996db6aa8cf701bb98d8ff8f2d21095d9e2c6468685abccfdc93fff462ba86a23eaf2df5618a68356c4f9b120db743f1eadb65ffa12ae0d440

  • SSDEEP

    1536:EGqRGbQHSgOTw1BFxnsUdsdBhMgxRFy2kckEUEVvccRPAAXLSYPph/ATvYSByU6H:lbjgjXxdWBhMwRFy2Rk/kcIAebPph/Ai

Score
7/10
upx

Malware Config

Targets

    • Target

      5eb74bdd1acfd53a0ab4ca3bdb73e030_NeikiAnalytics.exe

    • Size

      95KB

    • MD5

      5eb74bdd1acfd53a0ab4ca3bdb73e030

    • SHA1

      953f45eac593dffdcd71f24f8871ff7569bba2ea

    • SHA256

      ac431ed41314c7a919cd1e0b7e6b60a9b96a84a4358463eaabc3b2a3481b93a5

    • SHA512

      4df7faded6f202996db6aa8cf701bb98d8ff8f2d21095d9e2c6468685abccfdc93fff462ba86a23eaf2df5618a68356c4f9b120db743f1eadb65ffa12ae0d440

    • SSDEEP

      1536:EGqRGbQHSgOTw1BFxnsUdsdBhMgxRFy2kckEUEVvccRPAAXLSYPph/ATvYSByU6H:lbjgjXxdWBhMwRFy2Rk/kcIAebPph/Ai

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks