8d30b7904e53e7c657bf5cc6a7f0b76e07d9e9d39f7227b04200501f0b2ec589 | Triage

Sharing

General

Target

a0c916e3200d232249ee13612a41b4b0_NeikiAnalytics.exe
Size

518KB
Sample

240603-mzazbsca3z
MD5

a0c916e3200d232249ee13612a41b4b0
SHA1

93297a4dfc2bd11ec2d3cb6576bd10d94f559709
SHA256

8d30b7904e53e7c657bf5cc6a7f0b76e07d9e9d39f7227b04200501f0b2ec589
SHA512

446d1742b92390a6223a079528728710144a081ab10c6b12963fa5393d0a160780e9c9cec9f35de9006db0759c07709634e5b43098aca1c364330aa8bdab7848
SSDEEP

3072:FCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxs:FqDAwl0xPTMiR9JSSxPUKYGdodHr

Score

7^/10

Malware Config

Targets

- Target
  
  a0c916e3200d232249ee13612a41b4b0_NeikiAnalytics.exe
- Size
  
  518KB
- MD5
  
  a0c916e3200d232249ee13612a41b4b0
- SHA1
  
  93297a4dfc2bd11ec2d3cb6576bd10d94f559709
- SHA256
  
  8d30b7904e53e7c657bf5cc6a7f0b76e07d9e9d39f7227b04200501f0b2ec589
- SHA512
  
  446d1742b92390a6223a079528728710144a081ab10c6b12963fa5393d0a160780e9c9cec9f35de9006db0759c07709634e5b43098aca1c364330aa8bdab7848
- SSDEEP
  
  3072:FCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxs:FqDAwl0xPTMiR9JSSxPUKYGdodHr
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2