General

  • Target

    801a6ee394f70767310b11bdf2d8b480_NeikiAnalytics.exe

  • Size

    134KB

  • Sample

    240613-qqgmasvdkr

  • MD5

    801a6ee394f70767310b11bdf2d8b480

  • SHA1

    f5e6de526a3c4465b94447ad1ea1eee3d5498ed8

  • SHA256

    1b9d0946c9e5817330e86681eab591b99c2e3bde6cd3924f35e4b4cf5e0fd46b

  • SHA512

    d7f2eda021b5dd14857ee16fc3085ed53e013dfca30c64a77544deefbed622b5b1a1c622bffb4ff5681a6fca34e7681c50f9cd2e82d2f86e1a949557a0783008

  • SSDEEP

    1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SOx7:YfU/WF6QMauSuiWNi9eNOl0007NZIOx7

Score
7/10

Malware Config

Targets

    • Target

      801a6ee394f70767310b11bdf2d8b480_NeikiAnalytics.exe

    • Size

      134KB

    • MD5

      801a6ee394f70767310b11bdf2d8b480

    • SHA1

      f5e6de526a3c4465b94447ad1ea1eee3d5498ed8

    • SHA256

      1b9d0946c9e5817330e86681eab591b99c2e3bde6cd3924f35e4b4cf5e0fd46b

    • SHA512

      d7f2eda021b5dd14857ee16fc3085ed53e013dfca30c64a77544deefbed622b5b1a1c622bffb4ff5681a6fca34e7681c50f9cd2e82d2f86e1a949557a0783008

    • SSDEEP

      1536:YGYU/W2/HG6QMauSV3ixJHABLrmhH7i9eNOOg00GqMIK7aGZh3SOx7:YfU/WF6QMauSuiWNi9eNOl0007NZIOx7

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks