General

  • Target

    2e04b4533add721c75a7dda5038ffb60_NeikiAnalytics.exe

  • Size

    308KB

  • Sample

    240525-2p86psdh93

  • MD5

    2e04b4533add721c75a7dda5038ffb60

  • SHA1

    afe361ecdb6e86832d1d0bc1c87b4b5167093818

  • SHA256

    25f95050d2bf0875c9224302efb83f155a54a6842af3e9f53d114dcd8d657507

  • SHA512

    d716004aacb54002a16f7e6eb0a5a4aa380898ee1ee3810abd8952768c62b3e71bf4843e0fac89acbe6b8c5bede9c5bbe6c8325daf9b3b8a99961a0b9dd4a8c0

  • SSDEEP

    3072:gXYjFeH5Mc8SmaS+n6LQfrREHjShClmyikCUWDuP7w9Z0P97HpCZV:giTemfepfFEHu8zw0P97H

Score
10/10

Malware Config

Targets

    • Target

      2e04b4533add721c75a7dda5038ffb60_NeikiAnalytics.exe

    • Size

      308KB

    • MD5

      2e04b4533add721c75a7dda5038ffb60

    • SHA1

      afe361ecdb6e86832d1d0bc1c87b4b5167093818

    • SHA256

      25f95050d2bf0875c9224302efb83f155a54a6842af3e9f53d114dcd8d657507

    • SHA512

      d716004aacb54002a16f7e6eb0a5a4aa380898ee1ee3810abd8952768c62b3e71bf4843e0fac89acbe6b8c5bede9c5bbe6c8325daf9b3b8a99961a0b9dd4a8c0

    • SSDEEP

      3072:gXYjFeH5Mc8SmaS+n6LQfrREHjShClmyikCUWDuP7w9Z0P97HpCZV:giTemfepfFEHu8zw0P97H

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks