88136244a6f3859e738b682cb51f8bd0324a094cfefa7c1a89745aee12e071a4 | Triage

Sharing

General

Target

6b87a2377aeb8a4c5230a117fd4040d0_NeikiAnalytics
Size

85KB
Sample

240516-bd5e9sdb2z
MD5

6b87a2377aeb8a4c5230a117fd4040d0
SHA1

f1920f3ea690e58607af6b9da75df0d2f8b14b0e
SHA256

88136244a6f3859e738b682cb51f8bd0324a094cfefa7c1a89745aee12e071a4
SHA512

fbcb1bd0bf66ad76482377833364e5b6fc80eb35dedca844f563ffc89f53b1c9208737200418aa7879f803a354af0c7af2d77a83b1106fde594ee5864926e8af
SSDEEP

1536:D00URPnKfZrT2DawRR8JfP3VZB355B/CYTjipvF2a:D00URSfsGyRcZB355BqYvQd2a

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  6b87a2377aeb8a4c5230a117fd4040d0_NeikiAnalytics
- Size
  
  85KB
- MD5
  
  6b87a2377aeb8a4c5230a117fd4040d0
- SHA1
  
  f1920f3ea690e58607af6b9da75df0d2f8b14b0e
- SHA256
  
  88136244a6f3859e738b682cb51f8bd0324a094cfefa7c1a89745aee12e071a4
- SHA512
  
  fbcb1bd0bf66ad76482377833364e5b6fc80eb35dedca844f563ffc89f53b1c9208737200418aa7879f803a354af0c7af2d77a83b1106fde594ee5864926e8af
- SSDEEP
  
  1536:D00URPnKfZrT2DawRR8JfP3VZB355B/CYTjipvF2a:D00URSfsGyRcZB355BqYvQd2a
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2