2295bc8f52bdb88f236fede1542e2baa0cc6a6c0dae793f078df065e4d265103 | Triage

Sharing

General

Target

58ab3fca4873479bc4fb066ff5146710_NeikiAnalytics.exe
Size

92KB
Sample

240522-3jrvxadc86
MD5

58ab3fca4873479bc4fb066ff5146710
SHA1

ae19d2d87d0a9769794fdaf05264f637e23eb0c7
SHA256

2295bc8f52bdb88f236fede1542e2baa0cc6a6c0dae793f078df065e4d265103
SHA512

b354aee5faa3d2e87800a4cc5d65a37bd6eb1e6dd627e3aed8eb8fe67eb584eff2e9137111d4d395a778202543972dd647176ed2c9275647c119357c44735ce7
SSDEEP

1536:p7u6cOLK7hNIMLrCiS4xUfXM3xvuoSB5qEftLhSnWQD+hpX71qCiY:1eOLK7hNIMLrCiS4+PwRjY5xhEAXQCp

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  58ab3fca4873479bc4fb066ff5146710_NeikiAnalytics.exe
- Size
  
  92KB
- MD5
  
  58ab3fca4873479bc4fb066ff5146710
- SHA1
  
  ae19d2d87d0a9769794fdaf05264f637e23eb0c7
- SHA256
  
  2295bc8f52bdb88f236fede1542e2baa0cc6a6c0dae793f078df065e4d265103
- SHA512
  
  b354aee5faa3d2e87800a4cc5d65a37bd6eb1e6dd627e3aed8eb8fe67eb584eff2e9137111d4d395a778202543972dd647176ed2c9275647c119357c44735ce7
- SSDEEP
  
  1536:p7u6cOLK7hNIMLrCiS4xUfXM3xvuoSB5qEftLhSnWQD+hpX71qCiY:1eOLK7hNIMLrCiS4+PwRjY5xhEAXQCp
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2