Overview

overview

7

Static

static

3

6c697736dd...cs.exe

windows7-x64

7

6c697736dd...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c697736dd88c36f5690b8e0473758e0_NeikiAnalytics.exe

  • Size

    42KB

  • Sample

    240523-brvszsgf27

  • MD5

    6c697736dd88c36f5690b8e0473758e0

  • SHA1

    70c8fa9b13c322d8a95e146b4bbda17beff5a8f6

  • SHA256

    fe3d8f7d0164813eec33fee804a6bc970ad85fefc82877b01814a51dde55dbda

  • SHA512

    d10bb9066eafdef719fb3f16e13419623d1c8db55527554ae025cd37cbea03507f457b82a327079944f5fe6fdebb4ceacf6627a2af45fbacb80655a56763e101

  • SSDEEP

    768:Q1eRH+9lFh0ul16sh7iQroCHpf+RjFBSuB2XpOk:Q0l+Z16sh7iQroCURB0ufk

Score
7/10

Malware Config

Targets

    • Target

      6c697736dd88c36f5690b8e0473758e0_NeikiAnalytics.exe

    • Size

      42KB

    • MD5

      6c697736dd88c36f5690b8e0473758e0

    • SHA1

      70c8fa9b13c322d8a95e146b4bbda17beff5a8f6

    • SHA256

      fe3d8f7d0164813eec33fee804a6bc970ad85fefc82877b01814a51dde55dbda

    • SHA512

      d10bb9066eafdef719fb3f16e13419623d1c8db55527554ae025cd37cbea03507f457b82a327079944f5fe6fdebb4ceacf6627a2af45fbacb80655a56763e101

    • SSDEEP

      768:Q1eRH+9lFh0ul16sh7iQroCHpf+RjFBSuB2XpOk:Q0l+Z16sh7iQroCURB0ufk

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks