070d3586b075455363d7c3c46e4baa9301b5344054cae3226b6ad771fdbb5b72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fbf1bb6852b7e148d7634c6350e1f50_NeikiAnalytics.exe
Size

69KB
Sample

240526-ehgrjseg62
MD5

5fbf1bb6852b7e148d7634c6350e1f50
SHA1

f74779569a8e12ce05ad09ab2f5200c27aa3db13
SHA256

070d3586b075455363d7c3c46e4baa9301b5344054cae3226b6ad771fdbb5b72
SHA512

d0d8ce9a36ef4d8f55116ce6aab8ae84762ea8ceda41c060ca67497e671177f3efe50fcb4917b808a8025281b7a1d0ab1baf36433681657207fcff238caf8ea2
SSDEEP

1536:NB+FC9RntfWeoGiPyCHjKDjfQQQtUe/g7L0D:NB+F8tfPN4yCDKDjfQQQtHD

Score

7^/10

Malware Config

Targets

- Target
  
  5fbf1bb6852b7e148d7634c6350e1f50_NeikiAnalytics.exe
- Size
  
  69KB
- MD5
  
  5fbf1bb6852b7e148d7634c6350e1f50
- SHA1
  
  f74779569a8e12ce05ad09ab2f5200c27aa3db13
- SHA256
  
  070d3586b075455363d7c3c46e4baa9301b5344054cae3226b6ad771fdbb5b72
- SHA512
  
  d0d8ce9a36ef4d8f55116ce6aab8ae84762ea8ceda41c060ca67497e671177f3efe50fcb4917b808a8025281b7a1d0ab1baf36433681657207fcff238caf8ea2
- SSDEEP
  
  1536:NB+FC9RntfWeoGiPyCHjKDjfQQQtUe/g7L0D:NB+F8tfPN4yCDKDjfQQQtHD
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2