General

  • Target

    a3b58e8ac7bb7e139a3c29b58f3c4f20_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240603-pt6j6aef8z

  • MD5

    a3b58e8ac7bb7e139a3c29b58f3c4f20

  • SHA1

    872697b14865e70bc3463bc18de98fc0c854bdf8

  • SHA256

    0ca3a4b7099eb53a3d27f644cebeeed1963f1cab294daad9f945bb41ba6b5ffe

  • SHA512

    d0fb3c3aa1451ff9b01f95ec35b0db828de98f016c44da99e91428a6b926eaaafe09185361c02d17ecbdcd2b00fd0de820187e8c38c97262bc34bae38fc6a3d0

  • SSDEEP

    384:qL7li/2ziq2DcEQvdQcJKLTp/NK9xaXA:0yMCQ9cXA

Score
7/10

Malware Config

Targets

    • Target

      a3b58e8ac7bb7e139a3c29b58f3c4f20_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      a3b58e8ac7bb7e139a3c29b58f3c4f20

    • SHA1

      872697b14865e70bc3463bc18de98fc0c854bdf8

    • SHA256

      0ca3a4b7099eb53a3d27f644cebeeed1963f1cab294daad9f945bb41ba6b5ffe

    • SHA512

      d0fb3c3aa1451ff9b01f95ec35b0db828de98f016c44da99e91428a6b926eaaafe09185361c02d17ecbdcd2b00fd0de820187e8c38c97262bc34bae38fc6a3d0

    • SSDEEP

      384:qL7li/2ziq2DcEQvdQcJKLTp/NK9xaXA:0yMCQ9cXA

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks