76cfeb408dc405740fde71234d76972bd36ed14bedf00a1f5c804025a4c708be | Triage

Sharing

General

Target

4c7e97ecb94bc87b3b19a10311eebaf0_NeikiAnalytics.exe
Size

15KB
Sample

240522-2en3sabc9w
MD5

4c7e97ecb94bc87b3b19a10311eebaf0
SHA1

3c7387d71b41d459c8e4b3234c71eb9dc60a9a30
SHA256

76cfeb408dc405740fde71234d76972bd36ed14bedf00a1f5c804025a4c708be
SHA512

75f2ae67bd23bbb6fa382beedfd4259b31c3c7a69535578065ba929d577e6cbaa42129c105561e39351f2194115fb482c66fa59c3ee1b1b8bf9f0014e13f2bac
SSDEEP

192:QeXn/CQWRIgaXNl3jOThiAGj445A1/eRU8Y3tCSr5MR:QaaQWRIgaHIiA64CA1/QXYdCSr54

Score

7^/10

Malware Config

Targets

- Target
  
  4c7e97ecb94bc87b3b19a10311eebaf0_NeikiAnalytics.exe
- Size
  
  15KB
- MD5
  
  4c7e97ecb94bc87b3b19a10311eebaf0
- SHA1
  
  3c7387d71b41d459c8e4b3234c71eb9dc60a9a30
- SHA256
  
  76cfeb408dc405740fde71234d76972bd36ed14bedf00a1f5c804025a4c708be
- SHA512
  
  75f2ae67bd23bbb6fa382beedfd4259b31c3c7a69535578065ba929d577e6cbaa42129c105561e39351f2194115fb482c66fa59c3ee1b1b8bf9f0014e13f2bac
- SSDEEP
  
  192:QeXn/CQWRIgaXNl3jOThiAGj445A1/eRU8Y3tCSr5MR:QaaQWRIgaHIiA64CA1/QXYdCSr54
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2