1a822f257e6c9484ebca959c4897db70697b2f88d860e63cbd63813b9dcb188e | Triage

Sharing

General

Target

1213d3826baed14609b60ff4e4a770f0_NeikiAnalytics.exe
Size

602KB
Sample

240522-aex7xaee2z
MD5

1213d3826baed14609b60ff4e4a770f0
SHA1

ed852fcc6f9333e8ac41814a1990db4a71296663
SHA256

1a822f257e6c9484ebca959c4897db70697b2f88d860e63cbd63813b9dcb188e
SHA512

c352a2290b7a39bb9914e3afad62677ea309cdbee6eeb1611bf87c6ae41ca5440534facb243e95d72730e1f7bbd39f804bfa510406aaad8ce62e968d8d4c313e
SSDEEP

6144:FqDAwl0xPTMiR9JSSxPUKYGdodH/baqE7Al8jks:F+67XR9JSSxvYGdodH/1C1

Score

7^/10

Malware Config

Targets

- Target
  
  1213d3826baed14609b60ff4e4a770f0_NeikiAnalytics.exe
- Size
  
  602KB
- MD5
  
  1213d3826baed14609b60ff4e4a770f0
- SHA1
  
  ed852fcc6f9333e8ac41814a1990db4a71296663
- SHA256
  
  1a822f257e6c9484ebca959c4897db70697b2f88d860e63cbd63813b9dcb188e
- SHA512
  
  c352a2290b7a39bb9914e3afad62677ea309cdbee6eeb1611bf87c6ae41ca5440534facb243e95d72730e1f7bbd39f804bfa510406aaad8ce62e968d8d4c313e
- SSDEEP
  
  6144:FqDAwl0xPTMiR9JSSxPUKYGdodH/baqE7Al8jks:F+67XR9JSSxvYGdodH/1C1
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2