Overview

overview

7

Static

static

3

88dbe12faa...cs.exe

windows7-x64

7

88dbe12faa...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    88dbe12faa2d3a3ebe2fc6dbef00b960_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240608-d9krvage7v

  • MD5

    88dbe12faa2d3a3ebe2fc6dbef00b960

  • SHA1

    d06b20e13fb571ed9d7fdf51ef3c958019c3f9cd

  • SHA256

    3bc00e9d70cfcd19138a478250f41e17c028ae55b160a54c76af9f76530c701b

  • SHA512

    f8b1bfd87d30f2b69211e51d8ebc561d1e62f96cb811c772baae9c4afe84c9c485c18c0349426462ec159264e27f0243bf9edfd81d4395d897d1e343c6ad6e7f

  • SSDEEP

    384:HL7li/2z1q2DcEQvdhcJKLTp/NK9xaOf:rlM/Q9cOf

Score
7/10

Malware Config

Targets

    • Target

      88dbe12faa2d3a3ebe2fc6dbef00b960_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      88dbe12faa2d3a3ebe2fc6dbef00b960

    • SHA1

      d06b20e13fb571ed9d7fdf51ef3c958019c3f9cd

    • SHA256

      3bc00e9d70cfcd19138a478250f41e17c028ae55b160a54c76af9f76530c701b

    • SHA512

      f8b1bfd87d30f2b69211e51d8ebc561d1e62f96cb811c772baae9c4afe84c9c485c18c0349426462ec159264e27f0243bf9edfd81d4395d897d1e343c6ad6e7f

    • SSDEEP

      384:HL7li/2z1q2DcEQvdhcJKLTp/NK9xaOf:rlM/Q9cOf

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks