Overview

overview

7

Static

static

3

578f1ac98d...cs.exe

windows7-x64

7

578f1ac98d...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    578f1ac98d4d390c49f49839574461d0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240605-rgcseshd3w

  • MD5

    578f1ac98d4d390c49f49839574461d0

  • SHA1

    ae7315577fa329956e203123e2d548ef6c0e644a

  • SHA256

    aa7526b7320b5507d73763be528b3848cfcc9ef5bf24a6b5e35d1cb61a1146fc

  • SHA512

    4c213a9f4a2d05395bb7ab81a4573f46532310e81774dde8393a97e35e5d657fcb99844d8bcce5a5ea68a398fc6c3036a1dbabc5f2bde67e258e801c9ca9cc6c

  • SSDEEP

    384:OL7li/2zXq2DcEQvdhcJKLTp/NK9xaQZ:YTM/Q9cQZ

Score
7/10

Malware Config

Targets

    • Target

      578f1ac98d4d390c49f49839574461d0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      578f1ac98d4d390c49f49839574461d0

    • SHA1

      ae7315577fa329956e203123e2d548ef6c0e644a

    • SHA256

      aa7526b7320b5507d73763be528b3848cfcc9ef5bf24a6b5e35d1cb61a1146fc

    • SHA512

      4c213a9f4a2d05395bb7ab81a4573f46532310e81774dde8393a97e35e5d657fcb99844d8bcce5a5ea68a398fc6c3036a1dbabc5f2bde67e258e801c9ca9cc6c

    • SSDEEP

      384:OL7li/2zXq2DcEQvdhcJKLTp/NK9xaQZ:YTM/Q9cQZ

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks