Overview

overview

7

Static

static

3

f9d015f722...cs.exe

windows7-x64

7

f9d015f722...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f9d015f722e78a8e51878dd800bfa820_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240525-jhzpksag87

  • MD5

    f9d015f722e78a8e51878dd800bfa820

  • SHA1

    7be9f6a130328f5bf99caeb77e7292a3f2ede631

  • SHA256

    3a53020defdbae7fb991a4dd6799a02d4be4176c6090dd52afc7d50dabb258ea

  • SHA512

    40a75bb045fb1ae0c55ad357e65313506076ea217614b05ee76dd681e509f35722ca1753e534dc91021cf4e5f4925bc1e51ed80412e5794986d6961323e6c210

  • SSDEEP

    384:eL7li/2zEq2DcEQvdhcJKLTp/NK9xaQv:IwM/Q9cQv

Score
7/10

Malware Config

Targets

    • Target

      f9d015f722e78a8e51878dd800bfa820_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      f9d015f722e78a8e51878dd800bfa820

    • SHA1

      7be9f6a130328f5bf99caeb77e7292a3f2ede631

    • SHA256

      3a53020defdbae7fb991a4dd6799a02d4be4176c6090dd52afc7d50dabb258ea

    • SHA512

      40a75bb045fb1ae0c55ad357e65313506076ea217614b05ee76dd681e509f35722ca1753e534dc91021cf4e5f4925bc1e51ed80412e5794986d6961323e6c210

    • SSDEEP

      384:eL7li/2zEq2DcEQvdhcJKLTp/NK9xaQv:IwM/Q9cQv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks