Overview

overview

7

Static

static

3

71f440955f...cs.exe

windows7-x64

7

71f440955f...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71f440955fb2c27ea03f185d37f97a50_NeikiAnalytics.exe

  • Size

    41KB

  • Sample

    240523-ca5sashf43

  • MD5

    71f440955fb2c27ea03f185d37f97a50

  • SHA1

    447040c3058a20e69339c43d8a6d83441b2c8814

  • SHA256

    764ab83124ba3e11b7af7b174623f824101bd6caa80a565a6468e035314b7154

  • SHA512

    496872635730ebf6e1f5d03f14a711111fc30ca7d69dc340e6989538354cd53d4d4c9800609bf2bcd9f61d426f832833f76e0cf685bc1a0e445ac84bcb77a3f1

  • SSDEEP

    768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1h7:MAaDJlMsh7pWezq

Score
7/10

Malware Config

Targets

    • Target

      71f440955fb2c27ea03f185d37f97a50_NeikiAnalytics.exe

    • Size

      41KB

    • MD5

      71f440955fb2c27ea03f185d37f97a50

    • SHA1

      447040c3058a20e69339c43d8a6d83441b2c8814

    • SHA256

      764ab83124ba3e11b7af7b174623f824101bd6caa80a565a6468e035314b7154

    • SHA512

      496872635730ebf6e1f5d03f14a711111fc30ca7d69dc340e6989538354cd53d4d4c9800609bf2bcd9f61d426f832833f76e0cf685bc1a0e445ac84bcb77a3f1

    • SSDEEP

      768:MApQr0ovdFJI34eGxusOy9Rp1pLeAxoeC48PqK1h7:MAaDJlMsh7pWezq

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks