Overview

overview

7

Static

static

3

4fc1c8ae75...cs.exe

windows7-x64

7

4fc1c8ae75...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4fc1c8ae75210df304d5eb177acbf160_NeikiAnalytics.exe

  • Size

    47KB

  • Sample

    240522-2pzx2abh68

  • MD5

    4fc1c8ae75210df304d5eb177acbf160

  • SHA1

    f3d7d2671ed15e3e06bcd2941b11efbf11438927

  • SHA256

    6707a05d3eab844b745ed02eaf97328bc6fc163023ea872af1b903c36d85c6a6

  • SHA512

    1a28012b0342846462c1c7618b8caae1cd0d28ee82bc0b6efa6ca1d11c757b8d94262a33ffca080cab758cf7991f89f0701dd5f9a6e3ad683044164578d69abf

  • SSDEEP

    768:6zjIBGjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8OJ+1+Tadtp/bkt7Yd2+oX:AkGjXRrs9sINeZEtejlIkoLN127BFVn4

Score
7/10

Malware Config

Targets

    • Target

      4fc1c8ae75210df304d5eb177acbf160_NeikiAnalytics.exe

    • Size

      47KB

    • MD5

      4fc1c8ae75210df304d5eb177acbf160

    • SHA1

      f3d7d2671ed15e3e06bcd2941b11efbf11438927

    • SHA256

      6707a05d3eab844b745ed02eaf97328bc6fc163023ea872af1b903c36d85c6a6

    • SHA512

      1a28012b0342846462c1c7618b8caae1cd0d28ee82bc0b6efa6ca1d11c757b8d94262a33ffca080cab758cf7991f89f0701dd5f9a6e3ad683044164578d69abf

    • SSDEEP

      768:6zjIBGjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8OJ+1+Tadtp/bkt7Yd2+oX:AkGjXRrs9sINeZEtejlIkoLN127BFVn4

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks