Overview

overview

7

Static

static

3

403c0a92d2...cs.exe

windows7-x64

7

403c0a92d2...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    403c0a92d2512fb5c2dac1910a8590e0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240528-myyc8shc35

  • MD5

    403c0a92d2512fb5c2dac1910a8590e0

  • SHA1

    d3d25c884334ac81c550b8177ab5ed90a5271edf

  • SHA256

    b9f7fd8851f1db4fff2d8c88e0d81f0e543746d1f75c7f942564102a62aa9d8c

  • SHA512

    90433d669d153b776f942e39b0d78c3f990f51dd70f954287cde619dfd6367ea330dd409965f45dbf0c9b1ebb87223e37303ab913ba385e2fed2a12739dac057

  • SSDEEP

    384:AL7li/2zAq2DcEQvdhcJKLTp/NK9xam3:eMM/Q9cm3

Score
7/10

Malware Config

Targets

    • Target

      403c0a92d2512fb5c2dac1910a8590e0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      403c0a92d2512fb5c2dac1910a8590e0

    • SHA1

      d3d25c884334ac81c550b8177ab5ed90a5271edf

    • SHA256

      b9f7fd8851f1db4fff2d8c88e0d81f0e543746d1f75c7f942564102a62aa9d8c

    • SHA512

      90433d669d153b776f942e39b0d78c3f990f51dd70f954287cde619dfd6367ea330dd409965f45dbf0c9b1ebb87223e37303ab913ba385e2fed2a12739dac057

    • SSDEEP

      384:AL7li/2zAq2DcEQvdhcJKLTp/NK9xam3:eMM/Q9cm3

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks