Overview

overview

7

Static

static

3

d11ae9adc0...cs.exe

windows7-x64

7

d11ae9adc0...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d11ae9adc07e8e2c48948412546947c0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240530-jk6wnsca95

  • MD5

    d11ae9adc07e8e2c48948412546947c0

  • SHA1

    6a05c8f66819bdde0a030b9d164588210252c514

  • SHA256

    2f7935459019da5b1e4b69a523f2a1b650f488f91b483ada27cf7c2979a8c1bf

  • SHA512

    a95b2a3fdbee9aa135de918576055f7dc482d4a7d8dc590876942fee62b8ff7d08030980791e3cd77edc90699d2d7a2786cd81c70d8892417b69e981d39665ef

  • SSDEEP

    384:YL7li/2ziq2DcEQvdQcJKLTp/NK9xacC1x:m6MCQ9crx

Score
7/10

Malware Config

Targets

    • Target

      d11ae9adc07e8e2c48948412546947c0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      d11ae9adc07e8e2c48948412546947c0

    • SHA1

      6a05c8f66819bdde0a030b9d164588210252c514

    • SHA256

      2f7935459019da5b1e4b69a523f2a1b650f488f91b483ada27cf7c2979a8c1bf

    • SHA512

      a95b2a3fdbee9aa135de918576055f7dc482d4a7d8dc590876942fee62b8ff7d08030980791e3cd77edc90699d2d7a2786cd81c70d8892417b69e981d39665ef

    • SSDEEP

      384:YL7li/2ziq2DcEQvdQcJKLTp/NK9xacC1x:m6MCQ9crx

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks