c11d9779a1a2a843f258178d6f8b57b739382db3486ab655e90a1a86f07ba4e3 | Triage

Sharing

General

Target

06876b683169a8e631eafe49ad0ab020_NeikiAnalytics.exe
Size

316KB
Sample

240521-x4xn1afh9x
MD5

06876b683169a8e631eafe49ad0ab020
SHA1

68b618e0bed354d693e20c0556f01dc651191b20
SHA256

c11d9779a1a2a843f258178d6f8b57b739382db3486ab655e90a1a86f07ba4e3
SHA512

d44f17b138e95faa7f7546e37f2b1d102e73681e21f4628f5e6f055b4a86511702a029cccafb002349f4fccdec4b00535f0b31f9aea2d2c4de448d0a266cefc9
SSDEEP

3072:mYUb5QoJ4g+LsP9iGqT8ZjKIz1ZdW4SrOLVSVpe1GhpSBfmz:mY699qT8hKSZI4zLVSVpe1GvOfM

Score

7^/10

Malware Config

Targets

- Target
  
  06876b683169a8e631eafe49ad0ab020_NeikiAnalytics.exe
- Size
  
  316KB
- MD5
  
  06876b683169a8e631eafe49ad0ab020
- SHA1
  
  68b618e0bed354d693e20c0556f01dc651191b20
- SHA256
  
  c11d9779a1a2a843f258178d6f8b57b739382db3486ab655e90a1a86f07ba4e3
- SHA512
  
  d44f17b138e95faa7f7546e37f2b1d102e73681e21f4628f5e6f055b4a86511702a029cccafb002349f4fccdec4b00535f0b31f9aea2d2c4de448d0a266cefc9
- SSDEEP
  
  3072:mYUb5QoJ4g+LsP9iGqT8ZjKIz1ZdW4SrOLVSVpe1GhpSBfmz:mY699qT8hKSZI4zLVSVpe1GvOfM
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2