a27f124079e01e21cbfcb1e629b578e9911bf2f4c740e014943e8b3be0085ed9 | Triage

Sharing

General

Target

7669d1b70e1cf454973ee3900ab86ae0_NeikiAnalytics
Size

232KB
Sample

240510-zkpkdsgh2t
MD5

7669d1b70e1cf454973ee3900ab86ae0
SHA1

8ae969470bb90d7b5985fbd12a69090d589e710c
SHA256

a27f124079e01e21cbfcb1e629b578e9911bf2f4c740e014943e8b3be0085ed9
SHA512

2a28af7537e37388e64db35f04398ec5dc9f52a4ef8eb93ce19d122fd36ba5bd8911f7bac32222539b7b9b7777fd716b94a504c6d032998d5489252699ffe98d
SSDEEP

3072:GavK2KH6iehCjG8G3GbGVGBGfGuGxGWYcrf6Kadk:GaC2u4AYcD6Kad

Score

7^/10

Malware Config

Targets

- Target
  
  7669d1b70e1cf454973ee3900ab86ae0_NeikiAnalytics
- Size
  
  232KB
- MD5
  
  7669d1b70e1cf454973ee3900ab86ae0
- SHA1
  
  8ae969470bb90d7b5985fbd12a69090d589e710c
- SHA256
  
  a27f124079e01e21cbfcb1e629b578e9911bf2f4c740e014943e8b3be0085ed9
- SHA512
  
  2a28af7537e37388e64db35f04398ec5dc9f52a4ef8eb93ce19d122fd36ba5bd8911f7bac32222539b7b9b7777fd716b94a504c6d032998d5489252699ffe98d
- SSDEEP
  
  3072:GavK2KH6iehCjG8G3GbGVGBGfGuGxGWYcrf6Kadk:GaC2u4AYcD6Kad
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2