1bb2b3cde3f143d943aaf7d325c758d336cddc782ce803f3fe720cce99af8833 | Triage

Sharing

General

Target

70d5c960257e0c8944597b996a54cdf0_NeikiAnalytics
Size

89KB
Sample

240512-f667saeb92
MD5

70d5c960257e0c8944597b996a54cdf0
SHA1

3139b5c2a3326849fdb023572330fedab601d4c9
SHA256

1bb2b3cde3f143d943aaf7d325c758d336cddc782ce803f3fe720cce99af8833
SHA512

59427372ef69b2d417f1e7334bda92599e2b31b288c1eb6e8b6d4a796f89c3e674a32d91cb976792eeb9bc179fa5f6261c8e71e957320ac87d41dba3323c78b1
SSDEEP

1536:gzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcc:mfMNE1JG6XMk27EbpOthl0ZUed0c

Score

7^/10

Malware Config

Targets

- Target
  
  70d5c960257e0c8944597b996a54cdf0_NeikiAnalytics
- Size
  
  89KB
- MD5
  
  70d5c960257e0c8944597b996a54cdf0
- SHA1
  
  3139b5c2a3326849fdb023572330fedab601d4c9
- SHA256
  
  1bb2b3cde3f143d943aaf7d325c758d336cddc782ce803f3fe720cce99af8833
- SHA512
  
  59427372ef69b2d417f1e7334bda92599e2b31b288c1eb6e8b6d4a796f89c3e674a32d91cb976792eeb9bc179fa5f6261c8e71e957320ac87d41dba3323c78b1
- SSDEEP
  
  1536:gzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcc:mfMNE1JG6XMk27EbpOthl0ZUed0c
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2