1848959b002e840f0f8226e1c58cf0728745d348089e1b78849aceb20131a902 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e990da60ca54cc3df706ad703cba3080_NeikiAnalytics.exe
Size

19KB
Sample

240517-mnlaxsea5v
MD5

e990da60ca54cc3df706ad703cba3080
SHA1

31be0fdde8b4a7f157a468f0d74073eeff9ea56a
SHA256

1848959b002e840f0f8226e1c58cf0728745d348089e1b78849aceb20131a902
SHA512

6712b619fc082f968a3899b4839138be3197fc181efb9f63cddf618f5a83b66b907966f249be86f8edc421aefc38d6c2a64355cc19c93fe02b7a15f95ac2e1c9
SSDEEP

384:yIToumyhfQEtex3gVwy8F0J4KpVAUu41pMul3AU:7TKyXtk3hOPLA5KD3AU

Score

7^/10

Malware Config

Targets

- Target
  
  e990da60ca54cc3df706ad703cba3080_NeikiAnalytics.exe
- Size
  
  19KB
- MD5
  
  e990da60ca54cc3df706ad703cba3080
- SHA1
  
  31be0fdde8b4a7f157a468f0d74073eeff9ea56a
- SHA256
  
  1848959b002e840f0f8226e1c58cf0728745d348089e1b78849aceb20131a902
- SHA512
  
  6712b619fc082f968a3899b4839138be3197fc181efb9f63cddf618f5a83b66b907966f249be86f8edc421aefc38d6c2a64355cc19c93fe02b7a15f95ac2e1c9
- SSDEEP
  
  384:yIToumyhfQEtex3gVwy8F0J4KpVAUu41pMul3AU:7TKyXtk3hOPLA5KD3AU
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2