Overview

overview

7

Static

static

3

182a887a7b...cs.exe

windows7-x64

7

182a887a7b...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    182a887a7bf9fabd74c2cbfaf59a2580_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240527-y8jhlsab79

  • MD5

    182a887a7bf9fabd74c2cbfaf59a2580

  • SHA1

    ea3497872705f56927dc3feb0f6a4424676c9d69

  • SHA256

    563760e020c2d88df402a5d24e09b1c8b04f675156c3e1303ca289487277ef2e

  • SHA512

    0413ba4349b234f645049f78785a005b5df60889ef24b1e4a3bea7d06e49f0e0d13b374d0328df0d8f7b23da443d006eb7d05beff12debbfe836cccc9ea618d2

  • SSDEEP

    384:uL7li/2z5q2DcEQvdhcJKLTp/NK9xaQh:4pM/Q9cQh

Score
7/10

Malware Config

Targets

    • Target

      182a887a7bf9fabd74c2cbfaf59a2580_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      182a887a7bf9fabd74c2cbfaf59a2580

    • SHA1

      ea3497872705f56927dc3feb0f6a4424676c9d69

    • SHA256

      563760e020c2d88df402a5d24e09b1c8b04f675156c3e1303ca289487277ef2e

    • SHA512

      0413ba4349b234f645049f78785a005b5df60889ef24b1e4a3bea7d06e49f0e0d13b374d0328df0d8f7b23da443d006eb7d05beff12debbfe836cccc9ea618d2

    • SSDEEP

      384:uL7li/2z5q2DcEQvdhcJKLTp/NK9xaQh:4pM/Q9cQh

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks