Overview

overview

7

Static

static

3

74d6ed890d...cs.exe

windows7-x64

7

74d6ed890d...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74d6ed890d36b4a7d521d63cddc74580_NeikiAnalytics.exe

  • Size

    33KB

  • Sample

    240523-ck4mzsab82

  • MD5

    74d6ed890d36b4a7d521d63cddc74580

  • SHA1

    4809581d9f0ce0cb3012a4704be6ffc59f6bd62b

  • SHA256

    bde08b8f2be70dfd050962d9e97c988a3957ed5bb3d7a3b20d79b62f9b335bdb

  • SHA512

    20e098f4532b2fa6fa75a922f5bbc995b10af2b6424d2a2e3a352cfcaa28404363c0411ec4e5320bccc046f27a68cd03ba967933608e39514f5d1f1d5dc8c14f

  • SSDEEP

    384:MApc8m4e0fvQak4JI341Cdabnk6hJPNv+yTr:MApQr0fvdFJI34zTk6hJPNjn

Score
7/10

Malware Config

Targets

    • Target

      74d6ed890d36b4a7d521d63cddc74580_NeikiAnalytics.exe

    • Size

      33KB

    • MD5

      74d6ed890d36b4a7d521d63cddc74580

    • SHA1

      4809581d9f0ce0cb3012a4704be6ffc59f6bd62b

    • SHA256

      bde08b8f2be70dfd050962d9e97c988a3957ed5bb3d7a3b20d79b62f9b335bdb

    • SHA512

      20e098f4532b2fa6fa75a922f5bbc995b10af2b6424d2a2e3a352cfcaa28404363c0411ec4e5320bccc046f27a68cd03ba967933608e39514f5d1f1d5dc8c14f

    • SSDEEP

      384:MApc8m4e0fvQak4JI341Cdabnk6hJPNv+yTr:MApQr0fvdFJI34zTk6hJPNjn

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks