860119ce61553be54e70581c933761d1338e4c016f10de2c4faa86c19590bf99 | Triage

Sharing

General

Target

3a0a2984711e017f8b7dc30c03462bd0_NeikiAnalytics
Size

91KB
Sample

240512-wkpcvacb94
MD5

3a0a2984711e017f8b7dc30c03462bd0
SHA1

91762ee30048aff2166aecbd6da5ea96997fe011
SHA256

860119ce61553be54e70581c933761d1338e4c016f10de2c4faa86c19590bf99
SHA512

1e2623eea55adbaf24397fbc7fce94a0aba53100179f20896a52af887211148642365e2830c5710a2d1737f96f15377ea0de77c6b5f583300abf699a593c377a
SSDEEP

1536:tzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcd:5fMNE1JG6XMk27EbpOthl0ZUed0d

Score

7^/10

Malware Config

Targets

- Target
  
  3a0a2984711e017f8b7dc30c03462bd0_NeikiAnalytics
- Size
  
  91KB
- MD5
  
  3a0a2984711e017f8b7dc30c03462bd0
- SHA1
  
  91762ee30048aff2166aecbd6da5ea96997fe011
- SHA256
  
  860119ce61553be54e70581c933761d1338e4c016f10de2c4faa86c19590bf99
- SHA512
  
  1e2623eea55adbaf24397fbc7fce94a0aba53100179f20896a52af887211148642365e2830c5710a2d1737f96f15377ea0de77c6b5f583300abf699a593c377a
- SSDEEP
  
  1536:tzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcd:5fMNE1JG6XMk27EbpOthl0ZUed0d
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2