General

  • Target

    a7ddef8e86cbeb4abf075993d29dc720_NeikiAnalytics.exe

  • Size

    980KB

  • Sample

    240524-e5pexadd28

  • MD5

    a7ddef8e86cbeb4abf075993d29dc720

  • SHA1

    c29df781901dfb92217cc929c6123c58d977cf65

  • SHA256

    2f2b8a9d7ddb5e0359795b58d1fdb90210014c36e73b4cf81dfbe505ae706d3a

  • SHA512

    48f492edf94937b28dfb6a8a9f3233c6fe04f20e31a78b87a97a98458a4e609d07eeb6e3f99c5755d75ec0a6c42a524c3aa093de774addf5f384bcdace2a6830

  • SSDEEP

    24576:qp1Xxj4znVE7jKtEefA88gAAlGpi5YoMbSmn9NmmFVH6rEH7I:ytAVhtEF88gAXp9oK9Nmqa

Score
9/10

Malware Config

Targets

    • Target

      a7ddef8e86cbeb4abf075993d29dc720_NeikiAnalytics.exe

    • Size

      980KB

    • MD5

      a7ddef8e86cbeb4abf075993d29dc720

    • SHA1

      c29df781901dfb92217cc929c6123c58d977cf65

    • SHA256

      2f2b8a9d7ddb5e0359795b58d1fdb90210014c36e73b4cf81dfbe505ae706d3a

    • SHA512

      48f492edf94937b28dfb6a8a9f3233c6fe04f20e31a78b87a97a98458a4e609d07eeb6e3f99c5755d75ec0a6c42a524c3aa093de774addf5f384bcdace2a6830

    • SSDEEP

      24576:qp1Xxj4znVE7jKtEefA88gAAlGpi5YoMbSmn9NmmFVH6rEH7I:ytAVhtEF88gAXp9oK9Nmqa

    Score
    9/10
    • Nirsoft

    • Modifies AppInit DLL entries

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks