General

  • Target

    8d8855e0cea34014cda2fd1c1d363ac0_NeikiAnalytics.exe

  • Size

    44KB

  • Sample

    240601-e4gcxaae59

  • MD5

    8d8855e0cea34014cda2fd1c1d363ac0

  • SHA1

    85293ed42804c94f5ff6dbe913be2d809b96025d

  • SHA256

    7a5abeae5309ceb0c7c8b730103ef2a7432a9951c46586a75df7cfcbdea2d49f

  • SHA512

    f0c618678c8e17ce401bf1c58d2eca80dc1d6a6366700a7844151fb1003cd8b8f07945c8542d3361834c30d4a05fa5852e0d545900672cafd2a50baa0d9857c0

  • SSDEEP

    768:Nz/Hdq9/Jz1Xe04H7cHPHYmug6UXQm1dIZE2ocOT77e:NMJwHyj6S3T77

Score
10/10

Malware Config

Targets

    • Target

      8d8855e0cea34014cda2fd1c1d363ac0_NeikiAnalytics.exe

    • Size

      44KB

    • MD5

      8d8855e0cea34014cda2fd1c1d363ac0

    • SHA1

      85293ed42804c94f5ff6dbe913be2d809b96025d

    • SHA256

      7a5abeae5309ceb0c7c8b730103ef2a7432a9951c46586a75df7cfcbdea2d49f

    • SHA512

      f0c618678c8e17ce401bf1c58d2eca80dc1d6a6366700a7844151fb1003cd8b8f07945c8542d3361834c30d4a05fa5852e0d545900672cafd2a50baa0d9857c0

    • SSDEEP

      768:Nz/Hdq9/Jz1Xe04H7cHPHYmug6UXQm1dIZE2ocOT77e:NMJwHyj6S3T77

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks