a0687c2f185d2b4a559afa6d5b35e27454544aa2240c857d330afbfaf1c727b8 | Triage

Sharing

General

Target

071cfd381d04e3605c6153d139690270_NeikiAnalytics.exe
Size

94KB
Sample

240610-c2t5waah6y
MD5

071cfd381d04e3605c6153d139690270
SHA1

06626cc57f478bed5fbb41a97f4f8ebbce3affb8
SHA256

a0687c2f185d2b4a559afa6d5b35e27454544aa2240c857d330afbfaf1c727b8
SHA512

7f37e904649dd55fd3c072c4edaaced8b35c7023bad86a4adc4578f8b8685d2fceb38706082303985d0405a9ab6108193bfc0b69cf36e0565dc8ea25146844cd
SSDEEP

1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7uSS:PfU/WF6QMauSuiWNi9CO+WARJrWNZVS

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  071cfd381d04e3605c6153d139690270_NeikiAnalytics.exe
- Size
  
  94KB
- MD5
  
  071cfd381d04e3605c6153d139690270
- SHA1
  
  06626cc57f478bed5fbb41a97f4f8ebbce3affb8
- SHA256
  
  a0687c2f185d2b4a559afa6d5b35e27454544aa2240c857d330afbfaf1c727b8
- SHA512
  
  7f37e904649dd55fd3c072c4edaaced8b35c7023bad86a4adc4578f8b8685d2fceb38706082303985d0405a9ab6108193bfc0b69cf36e0565dc8ea25146844cd
- SSDEEP
  
  1536:PGYU/W2/HG6QMauSV3ixJHABLrmhH7i9CO+WHg7zRZICrWaGZh7uSS:PfU/WF6QMauSuiWNi9CO+WARJrWNZVS
Score

7^/10

persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2