Overview

overview

7

Static

static

3

8f00afee02...cs.exe

windows7-x64

7

8f00afee02...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8f00afee02a7c89b8801cb7749aa0420_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240601-f1w5mabc2w

  • MD5

    8f00afee02a7c89b8801cb7749aa0420

  • SHA1

    e3f1470c91dfa81988e6da22c8c9907d5d5b85c9

  • SHA256

    27696229bb185afbebc52ed0ae50cb6818172124349cd13631c23176f3db62b2

  • SHA512

    45da161dea217377b75a7eb28777a78cdb41cfdf53e01c27cc5b0c284bc47301990bb4290fbae38ac1dc60090d429cda94e3f048644e3ddb47780134417f5746

  • SSDEEP

    384:pL7li/2zhq2DcEQvdhcJKLTp/NK9xaD3q:ZZM/Q9cLq

Score
7/10

Malware Config

Targets

    • Target

      8f00afee02a7c89b8801cb7749aa0420_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      8f00afee02a7c89b8801cb7749aa0420

    • SHA1

      e3f1470c91dfa81988e6da22c8c9907d5d5b85c9

    • SHA256

      27696229bb185afbebc52ed0ae50cb6818172124349cd13631c23176f3db62b2

    • SHA512

      45da161dea217377b75a7eb28777a78cdb41cfdf53e01c27cc5b0c284bc47301990bb4290fbae38ac1dc60090d429cda94e3f048644e3ddb47780134417f5746

    • SSDEEP

      384:pL7li/2zhq2DcEQvdhcJKLTp/NK9xaD3q:ZZM/Q9cLq

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks