General

  • Target

    4f4dee40dd3fc3a5b5b97504832da0a0_NeikiAnalytics.exe

  • Size

    156KB

  • Sample

    240605-lx1arscd7t

  • MD5

    4f4dee40dd3fc3a5b5b97504832da0a0

  • SHA1

    7baf49fb38eeee96bc924c52eef94c4db2d06b7e

  • SHA256

    6ac4426791a5e9a350519a2c8c917b94f8d8ad55bed3e089e6a4a10648b0f758

  • SHA512

    d36170ffb4c8914ac4286ebee0b0f718e55aba5a21499e62628886ce825211d945629c183a1fc525d3623d35a492bb23fa448516d897faf040fdcf74feefd16e

  • SSDEEP

    3072:43oe5g+GwD8w2+d5bWIrJ4E5n41sSLdH8ozK/d/18Ulyc4oQZiEgd:4LWIrJ4E5n41pSN/jh7Wg

Score
10/10

Malware Config

Targets

    • Target

      4f4dee40dd3fc3a5b5b97504832da0a0_NeikiAnalytics.exe

    • Size

      156KB

    • MD5

      4f4dee40dd3fc3a5b5b97504832da0a0

    • SHA1

      7baf49fb38eeee96bc924c52eef94c4db2d06b7e

    • SHA256

      6ac4426791a5e9a350519a2c8c917b94f8d8ad55bed3e089e6a4a10648b0f758

    • SHA512

      d36170ffb4c8914ac4286ebee0b0f718e55aba5a21499e62628886ce825211d945629c183a1fc525d3623d35a492bb23fa448516d897faf040fdcf74feefd16e

    • SSDEEP

      3072:43oe5g+GwD8w2+d5bWIrJ4E5n41sSLdH8ozK/d/18Ulyc4oQZiEgd:4LWIrJ4E5n41pSN/jh7Wg

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks