697cda39413706e09393441ecbb3ec5968907d8255bfd89dec7cedfeb5bde0ed | Triage

Sharing

General

Target

4ff5ff509d4ccf726463b9c3c6c2da70_NeikiAnalytics.exe
Size

43KB
Sample

240529-lvtp7sbd44
MD5

4ff5ff509d4ccf726463b9c3c6c2da70
SHA1

368ad005d73a6a85715050cf2c5707ed16e5d669
SHA256

697cda39413706e09393441ecbb3ec5968907d8255bfd89dec7cedfeb5bde0ed
SHA512

785ef9afbced5cd5d858d16d10dd63244428754155dda5382c5966243ff2647ce0730d59784a9eacd1d35afde5493f5fb235d35896d27175172184a05a760b8b
SSDEEP

768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydu:bCDOw9aMDooc+vAyg

Score

7^/10

Malware Config

Targets

- Target
  
  4ff5ff509d4ccf726463b9c3c6c2da70_NeikiAnalytics.exe
- Size
  
  43KB
- MD5
  
  4ff5ff509d4ccf726463b9c3c6c2da70
- SHA1
  
  368ad005d73a6a85715050cf2c5707ed16e5d669
- SHA256
  
  697cda39413706e09393441ecbb3ec5968907d8255bfd89dec7cedfeb5bde0ed
- SHA512
  
  785ef9afbced5cd5d858d16d10dd63244428754155dda5382c5966243ff2647ce0730d59784a9eacd1d35afde5493f5fb235d35896d27175172184a05a760b8b
- SSDEEP
  
  768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAydu:bCDOw9aMDooc+vAyg
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2