028a3aa792b60c7c5c4b4c2db190312a9ff8bbb5a51b7d8bdd011b7584f7faf9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1437407d51e326ea1e5b71045fa1e0e0_NeikiAnalytics.exe
Size

42KB
Sample

240525-s62crahd9x
MD5

1437407d51e326ea1e5b71045fa1e0e0
SHA1

15f4557b47391c00e7e48bebd586c61379f30af5
SHA256

028a3aa792b60c7c5c4b4c2db190312a9ff8bbb5a51b7d8bdd011b7584f7faf9
SHA512

09da460c6c964205e67673304f3a0a704f15dfa6d64a5b065e7f1340581bc1e65c7730ac76de40118b7ca2a768b56e27ec89ec5b6d04064d65ac4b3c998b0298
SSDEEP

768:gQUGQ9WD4iWhdzv0pu9fWWe53EnFutwJN/OcD:0GQXh+pu9fWWe533cD

Score

7^/10

Malware Config

Targets

- Target
  
  1437407d51e326ea1e5b71045fa1e0e0_NeikiAnalytics.exe
- Size
  
  42KB
- MD5
  
  1437407d51e326ea1e5b71045fa1e0e0
- SHA1
  
  15f4557b47391c00e7e48bebd586c61379f30af5
- SHA256
  
  028a3aa792b60c7c5c4b4c2db190312a9ff8bbb5a51b7d8bdd011b7584f7faf9
- SHA512
  
  09da460c6c964205e67673304f3a0a704f15dfa6d64a5b065e7f1340581bc1e65c7730ac76de40118b7ca2a768b56e27ec89ec5b6d04064d65ac4b3c998b0298
- SSDEEP
  
  768:gQUGQ9WD4iWhdzv0pu9fWWe53EnFutwJN/OcD:0GQXh+pu9fWWe533cD
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2