3d64112e7067aa286b7e8bf6e4d6c1e81c84a97a604a1a346adaed3b6a767750 | Triage

Sharing

General

Target

228aa4cf8aa952d51d4830b97c7fd2e0_NeikiAnalytics.exe
Size

4.3MB
Sample

240612-gljfnasdnb
MD5

228aa4cf8aa952d51d4830b97c7fd2e0
SHA1

26952edfbc1c305f0e26a84d536d41089d927ca3
SHA256

3d64112e7067aa286b7e8bf6e4d6c1e81c84a97a604a1a346adaed3b6a767750
SHA512

e5f7627db6fbce43a92882c518037f13c3431f8718a91a4bc404d99602f58c2f9fd30c6b4c587bdf4824f5c4719fffcb1645d801fb424b27e63405f651567074
SSDEEP

24576:EZtM+M9NoZS/6oTNfRh3Qh3OXuaq4gPZrIbXEu8CkB7m8yWLth1Utl0uPD5DBQ:E4+CoZKTh36dZ4gPZU8JUjItvUjFly

Score

7^/10

Malware Config

Targets

- Target
  
  228aa4cf8aa952d51d4830b97c7fd2e0_NeikiAnalytics.exe
- Size
  
  4.3MB
- MD5
  
  228aa4cf8aa952d51d4830b97c7fd2e0
- SHA1
  
  26952edfbc1c305f0e26a84d536d41089d927ca3
- SHA256
  
  3d64112e7067aa286b7e8bf6e4d6c1e81c84a97a604a1a346adaed3b6a767750
- SHA512
  
  e5f7627db6fbce43a92882c518037f13c3431f8718a91a4bc404d99602f58c2f9fd30c6b4c587bdf4824f5c4719fffcb1645d801fb424b27e63405f651567074
- SSDEEP
  
  24576:EZtM+M9NoZS/6oTNfRh3Qh3OXuaq4gPZrIbXEu8CkB7m8yWLth1Utl0uPD5DBQ:E4+CoZKTh36dZ4gPZU8JUjItvUjFly
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2