9b8b74722c555fe8cb009b58615af25c36693a3aa53da67b914e8db5f9b29b91 | Triage

Sharing

General

Target

4a1b05bca5f2a071457d41187c1c29e0_NeikiAnalytics.exe
Size

64KB
Sample

240605-jswqnsba63
MD5

4a1b05bca5f2a071457d41187c1c29e0
SHA1

0a93bc121cddf541b9c019d48c214c8ea0760ed8
SHA256

9b8b74722c555fe8cb009b58615af25c36693a3aa53da67b914e8db5f9b29b91
SHA512

de7f55ef155b0ecbd7c8df675be3a7b40a1a0b0107b51cf6ed8f2135e982bf735c84ba86fb0c3ee79d3c4e875bccf39cde6531f3e4963506dd492f1fe36acffa
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsihr+:BbdDmjr+OtEvwDpjM85

Score

7^/10

Malware Config

Targets

- Target
  
  4a1b05bca5f2a071457d41187c1c29e0_NeikiAnalytics.exe
- Size
  
  64KB
- MD5
  
  4a1b05bca5f2a071457d41187c1c29e0
- SHA1
  
  0a93bc121cddf541b9c019d48c214c8ea0760ed8
- SHA256
  
  9b8b74722c555fe8cb009b58615af25c36693a3aa53da67b914e8db5f9b29b91
- SHA512
  
  de7f55ef155b0ecbd7c8df675be3a7b40a1a0b0107b51cf6ed8f2135e982bf735c84ba86fb0c3ee79d3c4e875bccf39cde6531f3e4963506dd492f1fe36acffa
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsihr+:BbdDmjr+OtEvwDpjM85
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2