Overview

overview

7

Static

static

3

2141eece56...cs.exe

windows7-x64

7

2141eece56...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2141eece5637c8c70eae990307b9f220_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240524-jp55yaad76

  • MD5

    2141eece5637c8c70eae990307b9f220

  • SHA1

    58e1e256e189840ae2fb568a150733df826864de

  • SHA256

    147a39816434ef685cc50ffded05d95eb48f912e156a165d2bf677d532504c6d

  • SHA512

    da4e3b612cadecd7eda684966addf4096840ef49efdb50ec4e50a9bd7786926445cebb50139bd0b4a7ff7452311f53a23be6f6b730668d06986ee4ac4ebf317c

  • SSDEEP

    384:OL7li/2zsq2DcEQvdhcJKLTp/NK9xaLR:YYM/Q9cLR

Score
7/10

Malware Config

Targets

    • Target

      2141eece5637c8c70eae990307b9f220_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      2141eece5637c8c70eae990307b9f220

    • SHA1

      58e1e256e189840ae2fb568a150733df826864de

    • SHA256

      147a39816434ef685cc50ffded05d95eb48f912e156a165d2bf677d532504c6d

    • SHA512

      da4e3b612cadecd7eda684966addf4096840ef49efdb50ec4e50a9bd7786926445cebb50139bd0b4a7ff7452311f53a23be6f6b730668d06986ee4ac4ebf317c

    • SSDEEP

      384:OL7li/2zsq2DcEQvdhcJKLTp/NK9xaLR:YYM/Q9cLR

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks