Overview

overview

7

Static

static

3

3e43977226...cs.exe

windows7-x64

7

3e43977226...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e439772261bc91cc430e15cfe5ca2f0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240604-jcq59ahe9v

  • MD5

    3e439772261bc91cc430e15cfe5ca2f0

  • SHA1

    869ef60e1227083740fdb0a7b94d79a417cb0d2d

  • SHA256

    684289abd865c137a1356368db6e5f5760bd46789b0783324af6f8461dae986f

  • SHA512

    541eeaffa2a3e7275ab69125d3a428734d29e35969adf2b774cf0721bf6b96191b18811c08dafff2722fc6b6480723d02f59237431bf9288cba4e1fec2d76a71

  • SSDEEP

    384:/L7li/2zzq2DcEQvdQcJKLTp/NK9xay3:zvMCQ9cy3

Score
7/10

Malware Config

Targets

    • Target

      3e439772261bc91cc430e15cfe5ca2f0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      3e439772261bc91cc430e15cfe5ca2f0

    • SHA1

      869ef60e1227083740fdb0a7b94d79a417cb0d2d

    • SHA256

      684289abd865c137a1356368db6e5f5760bd46789b0783324af6f8461dae986f

    • SHA512

      541eeaffa2a3e7275ab69125d3a428734d29e35969adf2b774cf0721bf6b96191b18811c08dafff2722fc6b6480723d02f59237431bf9288cba4e1fec2d76a71

    • SSDEEP

      384:/L7li/2zzq2DcEQvdQcJKLTp/NK9xay3:zvMCQ9cy3

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks