6b44adb9261be7349a6fb27cdf45e868d401a79f67be42b0ada0ea87136606bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

774b61b4934a21c7dd43024fdf891e60_NeikiAnalytics
Size

160KB
Sample

240510-fpq48sce7s
MD5

774b61b4934a21c7dd43024fdf891e60
SHA1

94ea76a73decea082991c4cbd61125ec879c6b0b
SHA256

6b44adb9261be7349a6fb27cdf45e868d401a79f67be42b0ada0ea87136606bc
SHA512

c623caa95042218f04a88e3a0b587119d7d38faca08a2f498f074505353affb84471bfa01a8776365954b1a9509f4e77d86cd379d66fd90e70d1b391b84f6984
SSDEEP

768:kVXL+uSmvRNnvmGihoJ0h4h2hQJVNjDkp57xXp5Rmg5Fh4hqhxOhDhzhnhvhzhOy:kZqMncJh4h2hON6x5puwVT0h

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  774b61b4934a21c7dd43024fdf891e60_NeikiAnalytics
- Size
  
  160KB
- MD5
  
  774b61b4934a21c7dd43024fdf891e60
- SHA1
  
  94ea76a73decea082991c4cbd61125ec879c6b0b
- SHA256
  
  6b44adb9261be7349a6fb27cdf45e868d401a79f67be42b0ada0ea87136606bc
- SHA512
  
  c623caa95042218f04a88e3a0b587119d7d38faca08a2f498f074505353affb84471bfa01a8776365954b1a9509f4e77d86cd379d66fd90e70d1b391b84f6984
- SSDEEP
  
  768:kVXL+uSmvRNnvmGihoJ0h4h2hQJVNjDkp57xXp5Rmg5Fh4hqhxOhDhzhnhvhzhOy:kZqMncJh4h2hON6x5puwVT0h
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2