Overview

overview

7

Static

static

3

6d6545af57...cs.exe

windows7-x64

7

6d6545af57...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d6545af57f5f07a2686b9b0f254e9a0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240523-bwd12agf3w

  • MD5

    6d6545af57f5f07a2686b9b0f254e9a0

  • SHA1

    7e0fb59eaecfb2038bfec2cc3d306ed093a35f5d

  • SHA256

    445c757029444573228919e4480e0a2cf34f4186e5bb748b317be60649071919

  • SHA512

    595a15a5889ce4e461df6f5162612b808f65fdcb0db9a3d871150863bf8d80e9721b3065942bdae0b9697f5b48bdbeba2d301f9e06d9fd7148043c524c43db10

  • SSDEEP

    384:jL7li/2zbq2DcEQvdhcJKLTp/NK9xa4K:nfM/Q9c4K

Score
7/10

Malware Config

Targets

    • Target

      6d6545af57f5f07a2686b9b0f254e9a0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      6d6545af57f5f07a2686b9b0f254e9a0

    • SHA1

      7e0fb59eaecfb2038bfec2cc3d306ed093a35f5d

    • SHA256

      445c757029444573228919e4480e0a2cf34f4186e5bb748b317be60649071919

    • SHA512

      595a15a5889ce4e461df6f5162612b808f65fdcb0db9a3d871150863bf8d80e9721b3065942bdae0b9697f5b48bdbeba2d301f9e06d9fd7148043c524c43db10

    • SSDEEP

      384:jL7li/2zbq2DcEQvdhcJKLTp/NK9xa4K:nfM/Q9c4K

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scripting

1
T1064

Persistence

Privilege Escalation

Defense Evasion

Scripting

1
T1064

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks