General

  • Target

    e247c6033cfe75b0bd885cc2f188ad70_NeikiAnalytics.exe

  • Size

    9.1MB

  • Sample

    240616-jrp7hazblk

  • MD5

    e247c6033cfe75b0bd885cc2f188ad70

  • SHA1

    6b182e9426eb37b3c2148fb72c4ed59be8efd2da

  • SHA256

    7473304546924af6ed2b12f3c1dc1b7fce65a3647eb3673b1d784f3ce431d557

  • SHA512

    4a9f65a9b64f0c12d78804dbb93d665be0c74528510a89d014fcd60c73710d3d0e141f947e1cf0b062fc5f90dc31b75ee5e4c382e9c8dd46a9ad12ee7341a692

  • SSDEEP

    196608:Xr2W7fQft5Zmnmv8YOVB/DEwYIbZ2lURDHR2wEmgDdzEwQHT/V8SmQjL0:b2cYki2lzyss3NAth0

Malware Config

Targets

    • Target

      e247c6033cfe75b0bd885cc2f188ad70_NeikiAnalytics.exe

    • Size

      9.1MB

    • MD5

      e247c6033cfe75b0bd885cc2f188ad70

    • SHA1

      6b182e9426eb37b3c2148fb72c4ed59be8efd2da

    • SHA256

      7473304546924af6ed2b12f3c1dc1b7fce65a3647eb3673b1d784f3ce431d557

    • SHA512

      4a9f65a9b64f0c12d78804dbb93d665be0c74528510a89d014fcd60c73710d3d0e141f947e1cf0b062fc5f90dc31b75ee5e4c382e9c8dd46a9ad12ee7341a692

    • SSDEEP

      196608:Xr2W7fQft5Zmnmv8YOVB/DEwYIbZ2lURDHR2wEmgDdzEwQHT/V8SmQjL0:b2cYki2lzyss3NAth0

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks