8d719db3772f8093906fa1bc7632213b08f7311d449687d04756d67fe0281f6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6cb8b2e1f68cc426053b6d28b17e5510_NeikiAnalytics.exe
Size

33KB
Sample

240526-fra6ssgg42
MD5

6cb8b2e1f68cc426053b6d28b17e5510
SHA1

b03024558538cd5ac0981333e983182eebf311ad
SHA256

8d719db3772f8093906fa1bc7632213b08f7311d449687d04756d67fe0281f6d
SHA512

3412cb75dcd9191f904e4996b68dc1a7497555c1d6f2c4c7cbc3a8bb0753b84c4cc1588ab08135057f47da3f74dfeaff466aa96680d189ee5b3dee25e7135159
SSDEEP

384:MApc8m4e0ovQak4JI341Cdabnk6hJPXA0G:MApQr0ovdFJI34/Tk6hJPXbG

Score

7^/10

Malware Config

Targets

- Target
  
  6cb8b2e1f68cc426053b6d28b17e5510_NeikiAnalytics.exe
- Size
  
  33KB
- MD5
  
  6cb8b2e1f68cc426053b6d28b17e5510
- SHA1
  
  b03024558538cd5ac0981333e983182eebf311ad
- SHA256
  
  8d719db3772f8093906fa1bc7632213b08f7311d449687d04756d67fe0281f6d
- SHA512
  
  3412cb75dcd9191f904e4996b68dc1a7497555c1d6f2c4c7cbc3a8bb0753b84c4cc1588ab08135057f47da3f74dfeaff466aa96680d189ee5b3dee25e7135159
- SSDEEP
  
  384:MApc8m4e0ovQak4JI341Cdabnk6hJPXA0G:MApQr0ovdFJI34/Tk6hJPXbG
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2