02da1904ecd826732ab2965b37069c73aa8c70cc031b4ca7a9341373bf6fb618 | Triage

Sharing

General

Target

a7f3ef628bc33990b59e34ea70856de0_NeikiAnalytics.exe
Size

531KB
Sample

240517-e57w9ahd8w
MD5

a7f3ef628bc33990b59e34ea70856de0
SHA1

b9cf9458c590337da390944a9783386aa60f659e
SHA256

02da1904ecd826732ab2965b37069c73aa8c70cc031b4ca7a9341373bf6fb618
SHA512

e710467f1597a1a12232db297eef540fd419d9bfa58266ffa5c87117ac9e75b89368f28de1b087b42ab2a7db283b7d9e8acca3db3bc536bb8199e9f8c0c8b0b2
SSDEEP

3072:4Cao5s1x1Pkl0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxA:4qal8l0xPTMiR9JSSxPUKYGdodH5

Score

7^/10

Malware Config

Targets

- Target
  
  a7f3ef628bc33990b59e34ea70856de0_NeikiAnalytics.exe
- Size
  
  531KB
- MD5
  
  a7f3ef628bc33990b59e34ea70856de0
- SHA1
  
  b9cf9458c590337da390944a9783386aa60f659e
- SHA256
  
  02da1904ecd826732ab2965b37069c73aa8c70cc031b4ca7a9341373bf6fb618
- SHA512
  
  e710467f1597a1a12232db297eef540fd419d9bfa58266ffa5c87117ac9e75b89368f28de1b087b42ab2a7db283b7d9e8acca3db3bc536bb8199e9f8c0c8b0b2
- SSDEEP
  
  3072:4Cao5s1x1Pkl0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxA:4qal8l0xPTMiR9JSSxPUKYGdodH5
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2