Overview

overview

7

Static

static

3

5ffd3f2242...cs.exe

windows7-x64

7

5ffd3f2242...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ffd3f22426951cbe0be77027ca144a0_NeikiAnalytics.exe

  • Size

    35KB

  • Sample

    240523-akf6ksed4z

  • MD5

    5ffd3f22426951cbe0be77027ca144a0

  • SHA1

    95f51a9ba22f406d6773ff7cb665412ea8c27782

  • SHA256

    d6122e7ccce7ce8140d1b455103269c846268bad0da1b39f14ccf5c262b26e65

  • SHA512

    743bb17457fd63fa1782dd28ccb805aacbfc681151a277e3321453ccb1dc0ba8c8a2a52c20f475072a16a081692c33487cb053ef54f0f413a80fd8f704dbb897

  • SSDEEP

    384:lrd1jR3l1cbELnrfjoRWw32UcPykQtr/S53DDELZhAbRx5ISm/P50jH:NvasrfjGW4xcPyzt25TALOi/P8H

Score
7/10

Malware Config

Targets

    • Target

      5ffd3f22426951cbe0be77027ca144a0_NeikiAnalytics.exe

    • Size

      35KB

    • MD5

      5ffd3f22426951cbe0be77027ca144a0

    • SHA1

      95f51a9ba22f406d6773ff7cb665412ea8c27782

    • SHA256

      d6122e7ccce7ce8140d1b455103269c846268bad0da1b39f14ccf5c262b26e65

    • SHA512

      743bb17457fd63fa1782dd28ccb805aacbfc681151a277e3321453ccb1dc0ba8c8a2a52c20f475072a16a081692c33487cb053ef54f0f413a80fd8f704dbb897

    • SSDEEP

      384:lrd1jR3l1cbELnrfjoRWw32UcPykQtr/S53DDELZhAbRx5ISm/P50jH:NvasrfjGW4xcPyzt25TALOi/P8H

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks