Overview

overview

7

Static

static

1

013112b7b4...cs.exe

windows7-x64

7

013112b7b4...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    013112b7b426d2560b0007df32bd7d70_NeikiAnalytics.exe

  • Size

    78KB

  • Sample

    240604-zpc26abg76

  • MD5

    013112b7b426d2560b0007df32bd7d70

  • SHA1

    f1694d54c71d715fd612575c19d61ea5e640b60d

  • SHA256

    75e2e0fec39f65e0cbdf6ff8db2050a573d0d54f60eccab0466c91e10f3b5d5b

  • SHA512

    762291e4c1e2f3b4cdf17d0175babf225397151e2d7d5677c6d3eced97ac068bcedb84aa22931a1d5eaa347da311e1950e7a004aa85ef17d10124d735b1b9444

  • SSDEEP

    1536:nLNIW39SaZTbFARlq7jC1OZstZu0TS3gEdUJCkb0FGc:nLlbZTZX3BAtTS3gEdUJCkb0FGc

Score
7/10
persistence

Malware Config

Targets

    • Target

      013112b7b426d2560b0007df32bd7d70_NeikiAnalytics.exe

    • Size

      78KB

    • MD5

      013112b7b426d2560b0007df32bd7d70

    • SHA1

      f1694d54c71d715fd612575c19d61ea5e640b60d

    • SHA256

      75e2e0fec39f65e0cbdf6ff8db2050a573d0d54f60eccab0466c91e10f3b5d5b

    • SHA512

      762291e4c1e2f3b4cdf17d0175babf225397151e2d7d5677c6d3eced97ac068bcedb84aa22931a1d5eaa347da311e1950e7a004aa85ef17d10124d735b1b9444

    • SSDEEP

      1536:nLNIW39SaZTbFARlq7jC1OZstZu0TS3gEdUJCkb0FGc:nLlbZTZX3BAtTS3gEdUJCkb0FGc

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks