Overview

overview

7

Static

static

3

a183764d0d...cs.exe

windows7-x64

7

a183764d0d...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a183764d0d4dc59eb970008125ae27c0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240527-nb6a1ahd6v

  • MD5

    a183764d0d4dc59eb970008125ae27c0

  • SHA1

    8e84d2f9ae19bd1a141f5e5d5ec82fb79868f4a2

  • SHA256

    0ed0f4e4094589992d4b21500c14fbdf5af02a8b0ba9e8cd133b028eebab56d3

  • SHA512

    30aa47ed5896b072a106ed5a7bba7523cffaf3f497efa3aa326d47b5a73cfc439d4146e04d087f6733f4e6f88915747f4e41eb804772aad2a831b61b35136325

  • SSDEEP

    384:1L7li/2zIq2DcEQvdQcJKLTp/NK9xan0:VcMCQ9cn0

Score
7/10

Malware Config

Targets

    • Target

      a183764d0d4dc59eb970008125ae27c0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      a183764d0d4dc59eb970008125ae27c0

    • SHA1

      8e84d2f9ae19bd1a141f5e5d5ec82fb79868f4a2

    • SHA256

      0ed0f4e4094589992d4b21500c14fbdf5af02a8b0ba9e8cd133b028eebab56d3

    • SHA512

      30aa47ed5896b072a106ed5a7bba7523cffaf3f497efa3aa326d47b5a73cfc439d4146e04d087f6733f4e6f88915747f4e41eb804772aad2a831b61b35136325

    • SSDEEP

      384:1L7li/2zIq2DcEQvdQcJKLTp/NK9xan0:VcMCQ9cn0

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks