faf1cd9348c44c614b6642f7aa7cf992d4e1bb7751506ffe9742cbd1f77ef937 | Triage

Sharing

General

Target

3aaca6d571267e72dc4add4845ca76a0_NeikiAnalytics
Size

97KB
Sample

240514-2nrv2acb4x
MD5

3aaca6d571267e72dc4add4845ca76a0
SHA1

2d76be60abe8bb910e5509b64076dd0d6127be3b
SHA256

faf1cd9348c44c614b6642f7aa7cf992d4e1bb7751506ffe9742cbd1f77ef937
SHA512

5a63f9a55c5e79cfd10a38ebecd1516531880840e71f46dfb9dd32bf9d96e84fb8bcaaa20f20de85d3046a3f87e7fb0dd5154f4d732691ae96086da476ca3f5c
SSDEEP

384:pMSTdCSYpIYpeaiMswx5NXhmLVNxzrba0DeuKF/1erFmRuA:qSRCSfXa9xThmzxzr5Kd88RuA

Score

7^/10

Malware Config

Targets

- Target
  
  3aaca6d571267e72dc4add4845ca76a0_NeikiAnalytics
- Size
  
  97KB
- MD5
  
  3aaca6d571267e72dc4add4845ca76a0
- SHA1
  
  2d76be60abe8bb910e5509b64076dd0d6127be3b
- SHA256
  
  faf1cd9348c44c614b6642f7aa7cf992d4e1bb7751506ffe9742cbd1f77ef937
- SHA512
  
  5a63f9a55c5e79cfd10a38ebecd1516531880840e71f46dfb9dd32bf9d96e84fb8bcaaa20f20de85d3046a3f87e7fb0dd5154f4d732691ae96086da476ca3f5c
- SSDEEP
  
  384:pMSTdCSYpIYpeaiMswx5NXhmLVNxzrba0DeuKF/1erFmRuA:qSRCSfXa9xThmzxzr5Kd88RuA
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2