General

  • Target

    8cccbff8eb2688f548482dedf2bb3010_NeikiAnalytics.exe

  • Size

    53KB

  • Sample

    240601-em1efshd3t

  • MD5

    8cccbff8eb2688f548482dedf2bb3010

  • SHA1

    6ce4d438cd4a5bcef4c330d430e02b0158c18728

  • SHA256

    a044ae368d32a3f18baa08ebc4f61e5fb977f025fcf256a3aef257ce8dabbb47

  • SHA512

    5eae07ffc2810104b5c536c3cf77f224da337bff3c5a9c27e8257bcee1b223199b296bb2d51f99e5cc84130e003504950612ac42a606171fb6719c4c55613091

  • SSDEEP

    1536:vNTg8r8Q6eXH7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:YeXHJJjmLM3zRJWZsXy4Jt

Score
10/10

Malware Config

Targets

    • Target

      8cccbff8eb2688f548482dedf2bb3010_NeikiAnalytics.exe

    • Size

      53KB

    • MD5

      8cccbff8eb2688f548482dedf2bb3010

    • SHA1

      6ce4d438cd4a5bcef4c330d430e02b0158c18728

    • SHA256

      a044ae368d32a3f18baa08ebc4f61e5fb977f025fcf256a3aef257ce8dabbb47

    • SHA512

      5eae07ffc2810104b5c536c3cf77f224da337bff3c5a9c27e8257bcee1b223199b296bb2d51f99e5cc84130e003504950612ac42a606171fb6719c4c55613091

    • SSDEEP

      1536:vNTg8r8Q6eXH7Kp3StjEMjmLM3ztDJWZsXy4JzxPME:YeXHJJjmLM3zRJWZsXy4Jt

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks