c02d7d9f075038ebf1792921bda49dc19103992bce0689e852a58d06182455a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f85e92cb08a30d70b9ae10b9ad00f20_NeikiAnalytics.exe
Size

398KB
Sample

240617-mx374a1fmp
MD5

7f85e92cb08a30d70b9ae10b9ad00f20
SHA1

4bc73402c1a57042f12fdff7db4923fa3182e7aa
SHA256

c02d7d9f075038ebf1792921bda49dc19103992bce0689e852a58d06182455a7
SHA512

d74fd5f67e7596893a0d0fb4dedf078590fa906f44627d86fb9e17437f52cec42ea866d6b4a95a93adf16b6ed3882f55d7efddd67cdd0bcdc6db32b200e26d62
SSDEEP

6144:u5xXylrltwTBnv3AX2jtBzmMZst2jKmU7UDGsGRlJ44zT3Al8Kmwm3KqR:a42Tlv3XKMZst0HUIIJa8K2R

Score

7^/10

Malware Config

Targets

- Target
  
  7f85e92cb08a30d70b9ae10b9ad00f20_NeikiAnalytics.exe
- Size
  
  398KB
- MD5
  
  7f85e92cb08a30d70b9ae10b9ad00f20
- SHA1
  
  4bc73402c1a57042f12fdff7db4923fa3182e7aa
- SHA256
  
  c02d7d9f075038ebf1792921bda49dc19103992bce0689e852a58d06182455a7
- SHA512
  
  d74fd5f67e7596893a0d0fb4dedf078590fa906f44627d86fb9e17437f52cec42ea866d6b4a95a93adf16b6ed3882f55d7efddd67cdd0bcdc6db32b200e26d62
- SSDEEP
  
  6144:u5xXylrltwTBnv3AX2jtBzmMZst2jKmU7UDGsGRlJ44zT3Al8Kmwm3KqR:a42Tlv3XKMZst0HUIIJa8K2R
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2