76d446a89ccce754ff31e8c490cba623154761902959954e13060c68b3d20ccd | Triage

Sharing

General

Target

96a302681bc3617f4609faa411ca6cb0_NeikiAnalytics.exe
Size

72KB
Sample

240608-hsxgjaba34
MD5

96a302681bc3617f4609faa411ca6cb0
SHA1

8960870e122458eed4e8aaf80e07d08df190c7ca
SHA256

76d446a89ccce754ff31e8c490cba623154761902959954e13060c68b3d20ccd
SHA512

491a2b4544ccb8647c138dae27420b6a67b0f42be0a90e04f50532365941f0a5e98fc69c2a51a1f2a3b7e470b0d84ab8063cd9981f53ef2323c58e4bd58b2a20
SSDEEP

768:TrItKyw5WHXfQmjIiIk9ecAa0Mb96SyX1DLdRXXXo:Tr3Z5IfQmv81ar1yXtZu

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  96a302681bc3617f4609faa411ca6cb0_NeikiAnalytics.exe
- Size
  
  72KB
- MD5
  
  96a302681bc3617f4609faa411ca6cb0
- SHA1
  
  8960870e122458eed4e8aaf80e07d08df190c7ca
- SHA256
  
  76d446a89ccce754ff31e8c490cba623154761902959954e13060c68b3d20ccd
- SHA512
  
  491a2b4544ccb8647c138dae27420b6a67b0f42be0a90e04f50532365941f0a5e98fc69c2a51a1f2a3b7e470b0d84ab8063cd9981f53ef2323c58e4bd58b2a20
- SSDEEP
  
  768:TrItKyw5WHXfQmjIiIk9ecAa0Mb96SyX1DLdRXXXo:Tr3Z5IfQmv81ar1yXtZu
Score

8^/10

evasion
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2