4680979b7d68877a59450434aaf3ce08d8287435311bc62a8ba55a19a3e2b22d | Triage

Sharing

General

Target

4680979b7d68877a59450434aaf3ce08d8287435311bc62a8ba55a19a3e2b22d_NeikiAnalytics.exe
Size

529KB
Sample

240620-jlgyyawgpe
MD5

176ae7201aaa9a6966403228d0c024f0
SHA1

432b799acc4d259733b1f8f554db80f9c6162e6c
SHA256

4680979b7d68877a59450434aaf3ce08d8287435311bc62a8ba55a19a3e2b22d
SHA512

2baea8a0e06e97987499cc332b3ddfa6e65e7051fabc435d7642a30d735e1b70ff6577ed75d57a9c8c6aed4da18bcc5d4958aeb70734b4ed7015aae2a5e57e89
SSDEEP

3072:ECaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxN:EqDAwl0xPTMiR9JSSxPUKYGdodH8

Score

7^/10

Malware Config

Targets

- Target
  
  4680979b7d68877a59450434aaf3ce08d8287435311bc62a8ba55a19a3e2b22d_NeikiAnalytics.exe
- Size
  
  529KB
- MD5
  
  176ae7201aaa9a6966403228d0c024f0
- SHA1
  
  432b799acc4d259733b1f8f554db80f9c6162e6c
- SHA256
  
  4680979b7d68877a59450434aaf3ce08d8287435311bc62a8ba55a19a3e2b22d
- SHA512
  
  2baea8a0e06e97987499cc332b3ddfa6e65e7051fabc435d7642a30d735e1b70ff6577ed75d57a9c8c6aed4da18bcc5d4958aeb70734b4ed7015aae2a5e57e89
- SSDEEP
  
  3072:ECaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxN:EqDAwl0xPTMiR9JSSxPUKYGdodH8
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2