General

  • Target

    75e3dbd1a5859b752f14405ff7d6ae10_NeikiAnalytics.exe

  • Size

    254KB

  • Sample

    240523-cqc28aad74

  • MD5

    75e3dbd1a5859b752f14405ff7d6ae10

  • SHA1

    ff9ce7c38c04642a1c2d7dace8858bf872d7e04b

  • SHA256

    5c40197d6a29a0da6d7f1851bbeec9e31c830bc4a90934ac8898861d843f9450

  • SHA512

    b6966e285cc99bc29ad7c82ebe7abc3a3d8bf0ac72e7e5b9d42be642e12f96367434bd47b8d6b3c4239812e027377094a24c0d2141ca9c267fa462c3d95b010f

  • SSDEEP

    6144:4f2Q6XjAR+xHoiv6eYepJnMBV+UdvrEFp7hKa:0cc+t6vBjvrEH7Z

Score
8/10

Malware Config

Targets

    • Target

      75e3dbd1a5859b752f14405ff7d6ae10_NeikiAnalytics.exe

    • Size

      254KB

    • MD5

      75e3dbd1a5859b752f14405ff7d6ae10

    • SHA1

      ff9ce7c38c04642a1c2d7dace8858bf872d7e04b

    • SHA256

      5c40197d6a29a0da6d7f1851bbeec9e31c830bc4a90934ac8898861d843f9450

    • SHA512

      b6966e285cc99bc29ad7c82ebe7abc3a3d8bf0ac72e7e5b9d42be642e12f96367434bd47b8d6b3c4239812e027377094a24c0d2141ca9c267fa462c3d95b010f

    • SSDEEP

      6144:4f2Q6XjAR+xHoiv6eYepJnMBV+UdvrEFp7hKa:0cc+t6vBjvrEH7Z

    Score
    8/10
    • Modifies AppInit DLL entries

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks