62bf42b5350c08db60103ba2bab6cb5cbee74b40c95d3742cd2e346451cd5179 | Triage

Sharing

General

Target

7b9b659a8deb0d70fbfc120326766e30_NeikiAnalytics.exe
Size

316KB
Sample

240531-hnf9rabc95
MD5

7b9b659a8deb0d70fbfc120326766e30
SHA1

929def45e95b47b710f57fa2a62d46df191a83e3
SHA256

62bf42b5350c08db60103ba2bab6cb5cbee74b40c95d3742cd2e346451cd5179
SHA512

b6b77da2d81e0543e86086b75f8051dc6452c02e31bfc81dd3b819e6d0436edaed9d73362c81b2dfa390b3335180d81c1f3a7281547587af04070c5ae2a0bf82
SSDEEP

3072:mYUb5QoJ4g+LsP9iGqT8ZjKIz1ZdW4SrOLVSVpe1GhpSBfm4:mY699qT8hKSZI4zLVSVpe1GvOfV

Score

7^/10

Malware Config

Targets

- Target
  
  7b9b659a8deb0d70fbfc120326766e30_NeikiAnalytics.exe
- Size
  
  316KB
- MD5
  
  7b9b659a8deb0d70fbfc120326766e30
- SHA1
  
  929def45e95b47b710f57fa2a62d46df191a83e3
- SHA256
  
  62bf42b5350c08db60103ba2bab6cb5cbee74b40c95d3742cd2e346451cd5179
- SHA512
  
  b6b77da2d81e0543e86086b75f8051dc6452c02e31bfc81dd3b819e6d0436edaed9d73362c81b2dfa390b3335180d81c1f3a7281547587af04070c5ae2a0bf82
- SSDEEP
  
  3072:mYUb5QoJ4g+LsP9iGqT8ZjKIz1ZdW4SrOLVSVpe1GhpSBfm4:mY699qT8hKSZI4zLVSVpe1GvOfV
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2