Overview

overview

7

Static

static

3

778a711616...cs.exe

windows7-x64

7

778a711616...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    778a7116161cd47a5447fc36ff0353a0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240523-cwcnmsae21

  • MD5

    778a7116161cd47a5447fc36ff0353a0

  • SHA1

    d5be4ec2525ce1e3da54cd213be708c23c7e7c36

  • SHA256

    e76f413f106f04974471460bb165d72869ed985c2a22bef23c2579dcd719dc32

  • SHA512

    f9ee968d163d800529a4fecc22ec5a822082f6628fe7f5a49b75721bfd62dfd32697ef39db38110109baf6bff33342e2c1683f0a4accfa6d1adbe80ba48ea366

  • SSDEEP

    384:tL7li/2zaq2DcEQvdQcJKLTp/NK9xaZP:9CMCQ9cZP

Score
7/10

Malware Config

Targets

    • Target

      778a7116161cd47a5447fc36ff0353a0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      778a7116161cd47a5447fc36ff0353a0

    • SHA1

      d5be4ec2525ce1e3da54cd213be708c23c7e7c36

    • SHA256

      e76f413f106f04974471460bb165d72869ed985c2a22bef23c2579dcd719dc32

    • SHA512

      f9ee968d163d800529a4fecc22ec5a822082f6628fe7f5a49b75721bfd62dfd32697ef39db38110109baf6bff33342e2c1683f0a4accfa6d1adbe80ba48ea366

    • SSDEEP

      384:tL7li/2zaq2DcEQvdQcJKLTp/NK9xaZP:9CMCQ9cZP

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scripting

1
T1064

Persistence

Privilege Escalation

Defense Evasion

Scripting

1
T1064

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks