1e3283f3b71ef5a7e3f99405145c7627be672fab7444697f269fbf8a8e4946bc | Triage

Sharing

General

Target

38acdf9ff17b1939e2773ebba41ca7b0_NeikiAnalytics.exe
Size

28KB
Sample

240522-zns2zsgb7x
MD5

38acdf9ff17b1939e2773ebba41ca7b0
SHA1

1f1d016d1b6a3a6dbab64e9f490e686475af8dfc
SHA256

1e3283f3b71ef5a7e3f99405145c7627be672fab7444697f269fbf8a8e4946bc
SHA512

5470a044940c3cd99feb95bd1fffb0ec9551efb67ef2e8e49d90fded39a42fddf874a2053adf9e17e59f25469c996144664ef09d57827d759d02c40cd324a86b
SSDEEP

384:YVeSrFqjmO/3zfNrP1T56TYpMYUzMk9hBcecystKqhMa82c7ky435/tVcOOCWq:YFNy3B1T5CN/zoyst/Mdn43RvcONWq

Score

7^/10

Malware Config

Targets

- Target
  
  38acdf9ff17b1939e2773ebba41ca7b0_NeikiAnalytics.exe
- Size
  
  28KB
- MD5
  
  38acdf9ff17b1939e2773ebba41ca7b0
- SHA1
  
  1f1d016d1b6a3a6dbab64e9f490e686475af8dfc
- SHA256
  
  1e3283f3b71ef5a7e3f99405145c7627be672fab7444697f269fbf8a8e4946bc
- SHA512
  
  5470a044940c3cd99feb95bd1fffb0ec9551efb67ef2e8e49d90fded39a42fddf874a2053adf9e17e59f25469c996144664ef09d57827d759d02c40cd324a86b
- SSDEEP
  
  384:YVeSrFqjmO/3zfNrP1T56TYpMYUzMk9hBcecystKqhMa82c7ky435/tVcOOCWq:YFNy3B1T5CN/zoyst/Mdn43RvcONWq
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2