Overview

overview

7

Static

static

3

bf4c8e2506...cs.exe

windows7-x64

7

bf4c8e2506...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf4c8e250602dbd4b327ad48c7680880_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240608-sa8f7ade83

  • MD5

    bf4c8e250602dbd4b327ad48c7680880

  • SHA1

    7b4d6196f0492f7e6d763eb8cbfdbb8869015466

  • SHA256

    f3e4cfc3f347d1feff2019072d06c342c89f6b8fa712eabd16d07395f101fbd1

  • SHA512

    fc9c62013975078833602eb0bdd911c5569b8c2f1d7f7461976438b3a9839ecd82be768f050690d6213b2a5c6ca1f203521225590ba84057ee5d5d64357c2f63

  • SSDEEP

    384:oL7li/2zgq2DcEQvdhcJKLTp/NK9xaX/:WkM/Q9cX/

Score
7/10

Malware Config

Targets

    • Target

      bf4c8e250602dbd4b327ad48c7680880_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      bf4c8e250602dbd4b327ad48c7680880

    • SHA1

      7b4d6196f0492f7e6d763eb8cbfdbb8869015466

    • SHA256

      f3e4cfc3f347d1feff2019072d06c342c89f6b8fa712eabd16d07395f101fbd1

    • SHA512

      fc9c62013975078833602eb0bdd911c5569b8c2f1d7f7461976438b3a9839ecd82be768f050690d6213b2a5c6ca1f203521225590ba84057ee5d5d64357c2f63

    • SSDEEP

      384:oL7li/2zgq2DcEQvdhcJKLTp/NK9xaX/:WkM/Q9cX/

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks