22658bdf0da20464eeca63e4c70e38c0ccb4b15e3dbcf7a7574e0b8c90586026 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8444fc0784e62d99efff7a9a8224cb0_NeikiAnalytics.exe
Size

1021KB
Sample

240524-1zybhsda47
MD5

d8444fc0784e62d99efff7a9a8224cb0
SHA1

ed94f53d63eab1aacc2f1228df7b617e94d4f2f1
SHA256

22658bdf0da20464eeca63e4c70e38c0ccb4b15e3dbcf7a7574e0b8c90586026
SHA512

f89b901214e10e836ac5e75b95447062cb254c36c914fcc7ec2fcedbf08095e08ba16ffd11543fb84e42e3941c9e0866b6bc80f5cae578ef7fa038aacbef3050
SSDEEP

24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAUGY:IylFHUv6ReIt0jSrOrY

Score

7^/10

Malware Config

Targets

- Target
  
  d8444fc0784e62d99efff7a9a8224cb0_NeikiAnalytics.exe
- Size
  
  1021KB
- MD5
  
  d8444fc0784e62d99efff7a9a8224cb0
- SHA1
  
  ed94f53d63eab1aacc2f1228df7b617e94d4f2f1
- SHA256
  
  22658bdf0da20464eeca63e4c70e38c0ccb4b15e3dbcf7a7574e0b8c90586026
- SHA512
  
  f89b901214e10e836ac5e75b95447062cb254c36c914fcc7ec2fcedbf08095e08ba16ffd11543fb84e42e3941c9e0866b6bc80f5cae578ef7fa038aacbef3050
- SSDEEP
  
  24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAUGY:IylFHUv6ReIt0jSrOrY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2