1206feb25d0022e11a2b2d0bc10bb58c69da11a03a1dafe8ebc97fd058e23f8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

325ac2c02c9132ff0b462d74d82777f0_NeikiAnalytics.exe
Size

89KB
Sample

240604-f3w8eafa96
MD5

325ac2c02c9132ff0b462d74d82777f0
SHA1

d6a616b9fa9ca4d9137f0e8676a04e099ec6e657
SHA256

1206feb25d0022e11a2b2d0bc10bb58c69da11a03a1dafe8ebc97fd058e23f8b
SHA512

2b40babf5823cbce1468939788b56256d0d147fefe2bfad78b5d6db3599a80abdc018256f744341cdbfe14a7dc59a58002ec4240e60f2098ffd2bcf57d608b40
SSDEEP

1536:gGaq93mQy5PV4MSu4M3vfAlA89mWMMF4pzYU2qIUZ6kd+ll:g5MaVVnLA0WLM0Uvh6kd+ll

Score

7^/10

Malware Config

Targets

- Target
  
  325ac2c02c9132ff0b462d74d82777f0_NeikiAnalytics.exe
- Size
  
  89KB
- MD5
  
  325ac2c02c9132ff0b462d74d82777f0
- SHA1
  
  d6a616b9fa9ca4d9137f0e8676a04e099ec6e657
- SHA256
  
  1206feb25d0022e11a2b2d0bc10bb58c69da11a03a1dafe8ebc97fd058e23f8b
- SHA512
  
  2b40babf5823cbce1468939788b56256d0d147fefe2bfad78b5d6db3599a80abdc018256f744341cdbfe14a7dc59a58002ec4240e60f2098ffd2bcf57d608b40
- SSDEEP
  
  1536:gGaq93mQy5PV4MSu4M3vfAlA89mWMMF4pzYU2qIUZ6kd+ll:g5MaVVnLA0WLM0Uvh6kd+ll
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2