e17918dcccb97ae8f1807894893a784112f2947db0659638ce1f4828f9e04265 | Triage

Sharing

General

Target

9f719326140a88704d9ca9d911031390_NeikiAnalytics.exe
Size

200KB
Sample

240527-j9tbwaee28
MD5

9f719326140a88704d9ca9d911031390
SHA1

803dcec82e1850792b65888714922bd9527780ab
SHA256

e17918dcccb97ae8f1807894893a784112f2947db0659638ce1f4828f9e04265
SHA512

4c2d91c67ddcf5d9086341443e9957c8f1c14a538b5e1f4e0a7bb867bba83d162fe459867d66d3df2035fdb34f3174b37effce2bc99bb6aeafa96ee501bccd52
SSDEEP

3072:mmjakl2LGo3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSRSGSuSQSmSNS4Sd:PaklQGo3yGFInRO

Score

7^/10

Malware Config

Targets

- Target
  
  9f719326140a88704d9ca9d911031390_NeikiAnalytics.exe
- Size
  
  200KB
- MD5
  
  9f719326140a88704d9ca9d911031390
- SHA1
  
  803dcec82e1850792b65888714922bd9527780ab
- SHA256
  
  e17918dcccb97ae8f1807894893a784112f2947db0659638ce1f4828f9e04265
- SHA512
  
  4c2d91c67ddcf5d9086341443e9957c8f1c14a538b5e1f4e0a7bb867bba83d162fe459867d66d3df2035fdb34f3174b37effce2bc99bb6aeafa96ee501bccd52
- SSDEEP
  
  3072:mmjakl2LGo3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSRSGSuSQSmSNS4Sd:PaklQGo3yGFInRO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2