Overview

overview

7

Static

static

3

e13f6e357b...cs.exe

windows7-x64

7

e13f6e357b...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e13f6e357bc501f1292193f8d0e25e90_NeikiAnalytics.exe

  • Size

    12KB

  • Sample

    240616-jhnmbaygnj

  • MD5

    e13f6e357bc501f1292193f8d0e25e90

  • SHA1

    e1c8a987ee8644deb205704ab737dc9930b509ef

  • SHA256

    61a36de2ffd8b6569adaacd8a2099b7384112ddd207435e53851bfe51c4ee3ce

  • SHA512

    f3dc3156bd577d16d89898f3f5265c517f2e6e2202c60e29a9fec5414424d016a0cea444092afd8d718646d54088ee7d6d2f190a4db67a3e02a83ef8223575a6

  • SSDEEP

    384:dL7li/2zbq2DcEQvdQcJKLTp/NK9xaZX:NfMCQ9cZX

Score
7/10

Malware Config

Targets

    • Target

      e13f6e357bc501f1292193f8d0e25e90_NeikiAnalytics.exe

    • Size

      12KB

    • MD5

      e13f6e357bc501f1292193f8d0e25e90

    • SHA1

      e1c8a987ee8644deb205704ab737dc9930b509ef

    • SHA256

      61a36de2ffd8b6569adaacd8a2099b7384112ddd207435e53851bfe51c4ee3ce

    • SHA512

      f3dc3156bd577d16d89898f3f5265c517f2e6e2202c60e29a9fec5414424d016a0cea444092afd8d718646d54088ee7d6d2f190a4db67a3e02a83ef8223575a6

    • SSDEEP

      384:dL7li/2zbq2DcEQvdQcJKLTp/NK9xaZX:NfMCQ9cZX

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks