General

  • Target

    a067b021337a4e01326d3988a6924d40_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240603-mp8gvach35

  • MD5

    a067b021337a4e01326d3988a6924d40

  • SHA1

    14aa28290db986cc110cab8a9cb8ecf5c739c1f6

  • SHA256

    880154ea0200f5a37705ba3540a3240a907c55b0a871a494a8fa57ec2b557d00

  • SHA512

    9ccc0fac792741fe23013114ad259ba53b729351740bc55d32e724cceccd548acb936296e6f421b6122da6ce5eee0c58ebb2405662fcf41671406723f63205c9

  • SSDEEP

    384:UL7li/2zNq2DcEQvdhcJKLTp/NK9xaxm:C9M/Q9cxm

Score
7/10

Malware Config

Targets

    • Target

      a067b021337a4e01326d3988a6924d40_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      a067b021337a4e01326d3988a6924d40

    • SHA1

      14aa28290db986cc110cab8a9cb8ecf5c739c1f6

    • SHA256

      880154ea0200f5a37705ba3540a3240a907c55b0a871a494a8fa57ec2b557d00

    • SHA512

      9ccc0fac792741fe23013114ad259ba53b729351740bc55d32e724cceccd548acb936296e6f421b6122da6ce5eee0c58ebb2405662fcf41671406723f63205c9

    • SSDEEP

      384:UL7li/2zNq2DcEQvdhcJKLTp/NK9xaxm:C9M/Q9cxm

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks