Overview

overview

7

Static

static

3

896a720695...cs.exe

windows7-x64

7

896a720695...cs.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    896a72069556478c3d118708250b80b0_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240608-eey7esgf4x

  • MD5

    896a72069556478c3d118708250b80b0

  • SHA1

    463be8536e5ba509c2f6bfd47f7e036ba256ae7b

  • SHA256

    d864ae9a236e78434d32e8e5ef0b27abf95e294aac554252a765b49b3228464d

  • SHA512

    ce07a35be77e176c299ad66dc2449aac7ed98b7789e7dd2fcc68db058d60fc577d5514f267daad5b7b210e6fc422d465683e3dead127b1636a3cca93275cbceb

  • SSDEEP

    384:ZL7li/2zUq2DcEQvdhcJKLTp/NK9xaP7Ga:pYM/Q9cP7Ga

Score
7/10

Malware Config

Targets

    • Target

      896a72069556478c3d118708250b80b0_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      896a72069556478c3d118708250b80b0

    • SHA1

      463be8536e5ba509c2f6bfd47f7e036ba256ae7b

    • SHA256

      d864ae9a236e78434d32e8e5ef0b27abf95e294aac554252a765b49b3228464d

    • SHA512

      ce07a35be77e176c299ad66dc2449aac7ed98b7789e7dd2fcc68db058d60fc577d5514f267daad5b7b210e6fc422d465683e3dead127b1636a3cca93275cbceb

    • SSDEEP

      384:ZL7li/2zUq2DcEQvdhcJKLTp/NK9xaP7Ga:pYM/Q9cP7Ga

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks