5cecb288ee1f9d5adc4ac8005567c69a8c5bcc567a3f6817eaf0178b59424120 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6acdc4430dc3cbf04e5615203b99d3f0_NeikiAnalytics.exe
Size

67KB
Sample

240530-2cxl5scg83
MD5

6acdc4430dc3cbf04e5615203b99d3f0
SHA1

d43978d2f46825aa05e7df0c20e09c2813fcabc1
SHA256

5cecb288ee1f9d5adc4ac8005567c69a8c5bcc567a3f6817eaf0178b59424120
SHA512

b04edc0c1bc43fa9997b4f2f01c1ef99645428996851f80007092ba1abf39b92d994681979b1cdab074d19f671f5b637fccd97d7840850f9b2b2470ba735323e
SSDEEP

1536:mUL/o7EjR2I0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsryrEgxSF:mq/5jMIPtdgI2MyzNORQtOflIwoHNV2h

Score

7^/10

Malware Config

Targets

- Target
  
  6acdc4430dc3cbf04e5615203b99d3f0_NeikiAnalytics.exe
- Size
  
  67KB
- MD5
  
  6acdc4430dc3cbf04e5615203b99d3f0
- SHA1
  
  d43978d2f46825aa05e7df0c20e09c2813fcabc1
- SHA256
  
  5cecb288ee1f9d5adc4ac8005567c69a8c5bcc567a3f6817eaf0178b59424120
- SHA512
  
  b04edc0c1bc43fa9997b4f2f01c1ef99645428996851f80007092ba1abf39b92d994681979b1cdab074d19f671f5b637fccd97d7840850f9b2b2470ba735323e
- SSDEEP
  
  1536:mUL/o7EjR2I0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsryrEgxSF:mq/5jMIPtdgI2MyzNORQtOflIwoHNV2h
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2