d6122e7ccce7ce8140d1b455103269c846268bad0da1b39f14ccf5c262b26e65 | Triage

Sharing

General

Target

5ffd3f22426951cbe0be77027ca144a0_NeikiAnalytics.exe
Size

35KB
Sample

240523-akf6ksed4z
MD5

5ffd3f22426951cbe0be77027ca144a0
SHA1

95f51a9ba22f406d6773ff7cb665412ea8c27782
SHA256

d6122e7ccce7ce8140d1b455103269c846268bad0da1b39f14ccf5c262b26e65
SHA512

743bb17457fd63fa1782dd28ccb805aacbfc681151a277e3321453ccb1dc0ba8c8a2a52c20f475072a16a081692c33487cb053ef54f0f413a80fd8f704dbb897
SSDEEP

384:lrd1jR3l1cbELnrfjoRWw32UcPykQtr/S53DDELZhAbRx5ISm/P50jH:NvasrfjGW4xcPyzt25TALOi/P8H

Score

7^/10

Malware Config

Targets

- Target
  
  5ffd3f22426951cbe0be77027ca144a0_NeikiAnalytics.exe
- Size
  
  35KB
- MD5
  
  5ffd3f22426951cbe0be77027ca144a0
- SHA1
  
  95f51a9ba22f406d6773ff7cb665412ea8c27782
- SHA256
  
  d6122e7ccce7ce8140d1b455103269c846268bad0da1b39f14ccf5c262b26e65
- SHA512
  
  743bb17457fd63fa1782dd28ccb805aacbfc681151a277e3321453ccb1dc0ba8c8a2a52c20f475072a16a081692c33487cb053ef54f0f413a80fd8f704dbb897
- SSDEEP
  
  384:lrd1jR3l1cbELnrfjoRWw32UcPykQtr/S53DDELZhAbRx5ISm/P50jH:NvasrfjGW4xcPyzt25TALOi/P8H
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2