General

  • Target

    d3b7a962aefddc89bb220bf6b8e36240_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240605-xwsebafa91

  • MD5

    d3b7a962aefddc89bb220bf6b8e36240

  • SHA1

    774a6e9ffbfe851cd8c4a3d3ae19449c3d3da9e3

  • SHA256

    ead751f3bf2e22918c913b45db9f51ca28d21936d0b8a409ab782c9f770a4cb3

  • SHA512

    600a9d97595360377374e99e00630942fad69c74ac0b8a20d7a04670b8afdc8128c8d023f213c22c5de9636c17cd1b03dba464c581f278e5abe497c429d46398

  • SSDEEP

    384:yL7li/2zvq2DcEQvdhcJKLTp/NK9xakV7E:srM/Q9ckV7E

Score
7/10

Malware Config

Targets

    • Target

      d3b7a962aefddc89bb220bf6b8e36240_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      d3b7a962aefddc89bb220bf6b8e36240

    • SHA1

      774a6e9ffbfe851cd8c4a3d3ae19449c3d3da9e3

    • SHA256

      ead751f3bf2e22918c913b45db9f51ca28d21936d0b8a409ab782c9f770a4cb3

    • SHA512

      600a9d97595360377374e99e00630942fad69c74ac0b8a20d7a04670b8afdc8128c8d023f213c22c5de9636c17cd1b03dba464c581f278e5abe497c429d46398

    • SSDEEP

      384:yL7li/2zvq2DcEQvdhcJKLTp/NK9xakV7E:srM/Q9ckV7E

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks