General

  • Target

    a1610be986efdca84d88fed9b3531df0_NeikiAnalytics

  • Size

    161KB

  • Sample

    240513-g9n12sde47

  • MD5

    a1610be986efdca84d88fed9b3531df0

  • SHA1

    aaaa5788addbd567810d52f1759f52be3b982249

  • SHA256

    293de9785c97c3eac587f2559a93701e7e468ae5cc861d11a12fd07bac66c517

  • SHA512

    d6a9583acbdd5856ce4f63980827190c26559d2b98605ce315512c279139744e1b6fc322f2d7538bae0b0bc0ef35bb7086e25e30c05e39553fd2bd898c00b9b0

  • SSDEEP

    1536:kVdmQr3Z5IfQmv81aypP1s3yX+tlehTzu:008JOfQm01F9s3yX+fehTq

Score
8/10

Malware Config

Targets

    • Target

      a1610be986efdca84d88fed9b3531df0_NeikiAnalytics

    • Size

      161KB

    • MD5

      a1610be986efdca84d88fed9b3531df0

    • SHA1

      aaaa5788addbd567810d52f1759f52be3b982249

    • SHA256

      293de9785c97c3eac587f2559a93701e7e468ae5cc861d11a12fd07bac66c517

    • SHA512

      d6a9583acbdd5856ce4f63980827190c26559d2b98605ce315512c279139744e1b6fc322f2d7538bae0b0bc0ef35bb7086e25e30c05e39553fd2bd898c00b9b0

    • SSDEEP

      1536:kVdmQr3Z5IfQmv81aypP1s3yX+tlehTzu:008JOfQm01F9s3yX+fehTq

    Score
    8/10
    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks