General

  • Target

    a4d0eda23c7b6acc7fcf8ba979165830_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240603-qmk6bahb93

  • MD5

    a4d0eda23c7b6acc7fcf8ba979165830

  • SHA1

    904998e7d841e13a75a72df24a227198e090aef0

  • SHA256

    7588a5b4ccf4e454aa50a1d764481465cfca04690a6ea700bcecda6caa327348

  • SHA512

    405b2d69b6db87ae7d0d39881476d880a813ee04bff8384c3bd8487a74c4d4de32dc8fa5cf9f42805b8f65d03d9c6f041a20c7c4691426293d34c961aadacda3

  • SSDEEP

    384:gL7li/2zWq2DcEBvdfcJKLTp/NK9xa7H:+ODZQ9c7H

Score
7/10

Malware Config

Targets

    • Target

      a4d0eda23c7b6acc7fcf8ba979165830_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      a4d0eda23c7b6acc7fcf8ba979165830

    • SHA1

      904998e7d841e13a75a72df24a227198e090aef0

    • SHA256

      7588a5b4ccf4e454aa50a1d764481465cfca04690a6ea700bcecda6caa327348

    • SHA512

      405b2d69b6db87ae7d0d39881476d880a813ee04bff8384c3bd8487a74c4d4de32dc8fa5cf9f42805b8f65d03d9c6f041a20c7c4691426293d34c961aadacda3

    • SSDEEP

      384:gL7li/2zWq2DcEBvdfcJKLTp/NK9xa7H:+ODZQ9c7H

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks