9a61071ee2f9b1bd08aab806c9fe9c04f19d948837d4f8bbcb0b5b9bc74f145c | Triage

Sharing

General

Target

03049699c2b2b2a40b33c6610b928860_NeikiAnalytics.exe
Size

45KB
Sample

240527-vyvlcace69
MD5

03049699c2b2b2a40b33c6610b928860
SHA1

cfd2483f7e404c728c5e67de38808b982a63cf24
SHA256

9a61071ee2f9b1bd08aab806c9fe9c04f19d948837d4f8bbcb0b5b9bc74f145c
SHA512

ae372d23045f844f04101263ff571c750f790bf3990acc72993bc19357c9ccbaad497cd3d8f47384e51e293abb4914f5a800af0609e69cbf33c1aa4a6f45455e
SSDEEP

768:6z2P7j8YtdwYGcizNexgteflIAoHNV2XBFV72h4lA7Z8EWWuM17tnwvs9aIHS6U8:6yP7YYtdwYGcizNexgteflIAoHNV2XBo

Score

7^/10

Malware Config

Targets

- Target
  
  03049699c2b2b2a40b33c6610b928860_NeikiAnalytics.exe
- Size
  
  45KB
- MD5
  
  03049699c2b2b2a40b33c6610b928860
- SHA1
  
  cfd2483f7e404c728c5e67de38808b982a63cf24
- SHA256
  
  9a61071ee2f9b1bd08aab806c9fe9c04f19d948837d4f8bbcb0b5b9bc74f145c
- SHA512
  
  ae372d23045f844f04101263ff571c750f790bf3990acc72993bc19357c9ccbaad497cd3d8f47384e51e293abb4914f5a800af0609e69cbf33c1aa4a6f45455e
- SSDEEP
  
  768:6z2P7j8YtdwYGcizNexgteflIAoHNV2XBFV72h4lA7Z8EWWuM17tnwvs9aIHS6U8:6yP7YYtdwYGcizNexgteflIAoHNV2XBo
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2