fe3d8f7d0164813eec33fee804a6bc970ad85fefc82877b01814a51dde55dbda | Triage

Sharing

General

Target

6c697736dd88c36f5690b8e0473758e0_NeikiAnalytics.exe
Size

42KB
Sample

240523-brvszsgf27
MD5

6c697736dd88c36f5690b8e0473758e0
SHA1

70c8fa9b13c322d8a95e146b4bbda17beff5a8f6
SHA256

fe3d8f7d0164813eec33fee804a6bc970ad85fefc82877b01814a51dde55dbda
SHA512

d10bb9066eafdef719fb3f16e13419623d1c8db55527554ae025cd37cbea03507f457b82a327079944f5fe6fdebb4ceacf6627a2af45fbacb80655a56763e101
SSDEEP

768:Q1eRH+9lFh0ul16sh7iQroCHpf+RjFBSuB2XpOk:Q0l+Z16sh7iQroCURB0ufk

Score

7^/10

Malware Config

Targets

- Target
  
  6c697736dd88c36f5690b8e0473758e0_NeikiAnalytics.exe
- Size
  
  42KB
- MD5
  
  6c697736dd88c36f5690b8e0473758e0
- SHA1
  
  70c8fa9b13c322d8a95e146b4bbda17beff5a8f6
- SHA256
  
  fe3d8f7d0164813eec33fee804a6bc970ad85fefc82877b01814a51dde55dbda
- SHA512
  
  d10bb9066eafdef719fb3f16e13419623d1c8db55527554ae025cd37cbea03507f457b82a327079944f5fe6fdebb4ceacf6627a2af45fbacb80655a56763e101
- SSDEEP
  
  768:Q1eRH+9lFh0ul16sh7iQroCHpf+RjFBSuB2XpOk:Q0l+Z16sh7iQroCURB0ufk
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2