3e567380d618a51fc7c5b4661b492713076f42c7c7e9704c8d0cefcf33c1aab1 | Triage

Sharing

General

Target

5e6083ccee589242a0e04924d36d3810_NeikiAnalytics.exe
Size

84KB
Sample

240523-adjywseb31
MD5

5e6083ccee589242a0e04924d36d3810
SHA1

5efa10265ec3a5f1080e47a0fa819a2edb16069a
SHA256

3e567380d618a51fc7c5b4661b492713076f42c7c7e9704c8d0cefcf33c1aab1
SHA512

70da7f1c6f7cece8c4175388974361ba64e3f1d9f0442b3fce3cf06cd0816edad8752c896efa36ee13e1de492c63469db10ce810d5adedc99dbe41d439989615
SSDEEP

1536:sB+FC9RntfWeoGiPyCHjKDjvQQQtUw2dfkoT/y2ZLJFg:sB+F8tfPN4yCDKDjvQQQtL

Score

7^/10

Malware Config

Targets

- Target
  
  5e6083ccee589242a0e04924d36d3810_NeikiAnalytics.exe
- Size
  
  84KB
- MD5
  
  5e6083ccee589242a0e04924d36d3810
- SHA1
  
  5efa10265ec3a5f1080e47a0fa819a2edb16069a
- SHA256
  
  3e567380d618a51fc7c5b4661b492713076f42c7c7e9704c8d0cefcf33c1aab1
- SHA512
  
  70da7f1c6f7cece8c4175388974361ba64e3f1d9f0442b3fce3cf06cd0816edad8752c896efa36ee13e1de492c63469db10ce810d5adedc99dbe41d439989615
- SSDEEP
  
  1536:sB+FC9RntfWeoGiPyCHjKDjvQQQtUw2dfkoT/y2ZLJFg:sB+F8tfPN4yCDKDjvQQQtL
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2