436e99680521356a352986cb59903b378b40fe60f2be7497fb8ac8a8f73a1e36 | Triage

Sharing

General

Target

403fd972b5b61b1daf4b47a835902a70_NeikiAnalytics.exe
Size

32KB
Sample

240525-jkbersah38
MD5

403fd972b5b61b1daf4b47a835902a70
SHA1

56b5d3e752642621feec0abe84505bade2e90ea2
SHA256

436e99680521356a352986cb59903b378b40fe60f2be7497fb8ac8a8f73a1e36
SHA512

4b7c64751fda109fd38ac9ba11ee5df810fc2bdb50d91fae90f742f1377069b57e0fce11b2fd4a76cfe50c58f0a74d1aa15946e5c3e382dcd69d70b952c66c79
SSDEEP

768:W67xaGjAer7gy4QMcZJpeBHgf8nR5qN66++u:Mer8yj3WHJniN66++u

Score

7^/10

Malware Config

Targets

- Target
  
  403fd972b5b61b1daf4b47a835902a70_NeikiAnalytics.exe
- Size
  
  32KB
- MD5
  
  403fd972b5b61b1daf4b47a835902a70
- SHA1
  
  56b5d3e752642621feec0abe84505bade2e90ea2
- SHA256
  
  436e99680521356a352986cb59903b378b40fe60f2be7497fb8ac8a8f73a1e36
- SHA512
  
  4b7c64751fda109fd38ac9ba11ee5df810fc2bdb50d91fae90f742f1377069b57e0fce11b2fd4a76cfe50c58f0a74d1aa15946e5c3e382dcd69d70b952c66c79
- SSDEEP
  
  768:W67xaGjAer7gy4QMcZJpeBHgf8nR5qN66++u:Mer8yj3WHJniN66++u
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2