c1884c59389620e398c738bd2c0bb44d7dd1deb327dddf690edf67432eec8bc1 | Triage

Sharing

General

Target

0e217d9345c5d9267e2e793f618c7730_NeikiAnalytics.exe
Size

24KB
Sample

240604-mm2lhsea36
MD5

0e217d9345c5d9267e2e793f618c7730
SHA1

789241baef5d4d6b413f3093cb95c3807e627ed2
SHA256

c1884c59389620e398c738bd2c0bb44d7dd1deb327dddf690edf67432eec8bc1
SHA512

e23e41120ad2c46d62af002a5cdd8827531347dfea1a3c7ef31acda9fe2d1beae556073c311d3975f844e9c5f091e58dc7ff4edff4832da655173fa65e8a16dc
SSDEEP

768:CnpnIYh43Dc3GbWXLFaun5jfkcha1MbTY:qSq5jMca1MPY

Score

7^/10

Malware Config

Targets

- Target
  
  0e217d9345c5d9267e2e793f618c7730_NeikiAnalytics.exe
- Size
  
  24KB
- MD5
  
  0e217d9345c5d9267e2e793f618c7730
- SHA1
  
  789241baef5d4d6b413f3093cb95c3807e627ed2
- SHA256
  
  c1884c59389620e398c738bd2c0bb44d7dd1deb327dddf690edf67432eec8bc1
- SHA512
  
  e23e41120ad2c46d62af002a5cdd8827531347dfea1a3c7ef31acda9fe2d1beae556073c311d3975f844e9c5f091e58dc7ff4edff4832da655173fa65e8a16dc
- SSDEEP
  
  768:CnpnIYh43Dc3GbWXLFaun5jfkcha1MbTY:qSq5jMca1MPY
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2