fe24f7888701abee68708f0e4b93fcfbf78407604de79a011276acc14c9babad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1020d6374083ec3990da048d08b10360_NeikiAnalytics.exe
Size

27KB
Sample

240521-115rzsbh83
MD5

1020d6374083ec3990da048d08b10360
SHA1

953ac390026692fce7f2d0d785d18b388eeb4fc4
SHA256

fe24f7888701abee68708f0e4b93fcfbf78407604de79a011276acc14c9babad
SHA512

39774b1410d43abffecebd64ed4b074598ae9c1d12fa194fc02156908667ce9c8f46067152ca2cc5b8f758ae5e4a1d36d4e8a86464433fc6e2987c909b10fac5
SSDEEP

384:tq+t53vTACi4M7xY78nBflYSgT1PaF9KlZhHRj/qZUzhOK3i:DV9iL7xYAnBq5QFQrhHRTqq8Z

Score

7^/10

Malware Config

Targets

- Target
  
  1020d6374083ec3990da048d08b10360_NeikiAnalytics.exe
- Size
  
  27KB
- MD5
  
  1020d6374083ec3990da048d08b10360
- SHA1
  
  953ac390026692fce7f2d0d785d18b388eeb4fc4
- SHA256
  
  fe24f7888701abee68708f0e4b93fcfbf78407604de79a011276acc14c9babad
- SHA512
  
  39774b1410d43abffecebd64ed4b074598ae9c1d12fa194fc02156908667ce9c8f46067152ca2cc5b8f758ae5e4a1d36d4e8a86464433fc6e2987c909b10fac5
- SSDEEP
  
  384:tq+t53vTACi4M7xY78nBflYSgT1PaF9KlZhHRj/qZUzhOK3i:DV9iL7xYAnBq5QFQrhHRTqq8Z
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2