General

  • Target

    169d837d63638c194d79d8101c492510_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240609-jly78age63

  • MD5

    169d837d63638c194d79d8101c492510

  • SHA1

    2dea6dd272889f242b2e25819efea7cb5dabca14

  • SHA256

    d93ac8d227441ca127d76c51bd85a1205b7d3393f6b15e1290cec16785e4ee7a

  • SHA512

    288f8bd0f1aa6e81b49381f88760b377d27e1f2cb6e8f6cb54feb67273fea2f7d39a408543e11acd91ea609cfefa40fd86f552fa9d60f8333320c70f90fcd32e

  • SSDEEP

    384:ML7li/2zJq2DcEQvdhcJKLTp/NK9xaGG:KJM/Q9cGG

Score
7/10

Malware Config

Targets

    • Target

      169d837d63638c194d79d8101c492510_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      169d837d63638c194d79d8101c492510

    • SHA1

      2dea6dd272889f242b2e25819efea7cb5dabca14

    • SHA256

      d93ac8d227441ca127d76c51bd85a1205b7d3393f6b15e1290cec16785e4ee7a

    • SHA512

      288f8bd0f1aa6e81b49381f88760b377d27e1f2cb6e8f6cb54feb67273fea2f7d39a408543e11acd91ea609cfefa40fd86f552fa9d60f8333320c70f90fcd32e

    • SSDEEP

      384:ML7li/2zJq2DcEQvdhcJKLTp/NK9xaGG:KJM/Q9cGG

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks