5e2c2e6e156fb9b602c05954dd3cb6b778b5154d684fa549eb5dd6ea666af153 | Triage

Sharing

General

Target

aeb75dc0b759e1a5f4cff9bff55ace50_NeikiAnalytics.exe
Size

22KB
Sample

240526-n27lraag86
MD5

aeb75dc0b759e1a5f4cff9bff55ace50
SHA1

39156cbd227f99b2795fcbd45ab4d766a6917c1b
SHA256

5e2c2e6e156fb9b602c05954dd3cb6b778b5154d684fa549eb5dd6ea666af153
SHA512

bafb80caf25f55fe300eb94fcc1f66eac4bbf02bd27222cef3da4bf908d26cbf3bb2da8846bb25802dbcb4d9a33ef67f271a62c7f87dae6727517413f5acc115
SSDEEP

192:qytgAeuB2S7FFWlSkABcI+EWL/hTUozHLYDo2SIcIn8/wKUlT8AF8rV3u:qySFpcI5pTUo7L2FSmnmwKUl4AF8rY

Score

7^/10

Malware Config

Targets

- Target
  
  aeb75dc0b759e1a5f4cff9bff55ace50_NeikiAnalytics.exe
- Size
  
  22KB
- MD5
  
  aeb75dc0b759e1a5f4cff9bff55ace50
- SHA1
  
  39156cbd227f99b2795fcbd45ab4d766a6917c1b
- SHA256
  
  5e2c2e6e156fb9b602c05954dd3cb6b778b5154d684fa549eb5dd6ea666af153
- SHA512
  
  bafb80caf25f55fe300eb94fcc1f66eac4bbf02bd27222cef3da4bf908d26cbf3bb2da8846bb25802dbcb4d9a33ef67f271a62c7f87dae6727517413f5acc115
- SSDEEP
  
  192:qytgAeuB2S7FFWlSkABcI+EWL/hTUozHLYDo2SIcIn8/wKUlT8AF8rV3u:qySFpcI5pTUo7L2FSmnmwKUl4AF8rY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2