0d1fc25a00af2f8f8c2645797029f5432ebc65adedc368c69fa74cbc227dc995 | Triage

Sharing

General

Target

0d1fc25a00af2f8f8c2645797029f5432ebc65adedc368c69fa74cbc227dc995_NeikiAnalytics.exe
Size

66KB
Sample

240624-2rh3aszajl
MD5

ff36c7f7a6175f22c58b18607f5f14e0
SHA1

5598d50faf1093e8f83d09055576a45f2e79c81e
SHA256

0d1fc25a00af2f8f8c2645797029f5432ebc65adedc368c69fa74cbc227dc995
SHA512

78f6d284bb66ddd57d2774144f8c258baf6a01d2c5ff2ef4ceabdd178bc67e512e8396821945244fe5985ff2834e650ef36334b49e195b9f44117ad367954bca
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi4Q:BbdDmjr+OtEvwDpjM8i

Score

7^/10

Malware Config

Targets

- Target
  
  0d1fc25a00af2f8f8c2645797029f5432ebc65adedc368c69fa74cbc227dc995_NeikiAnalytics.exe
- Size
  
  66KB
- MD5
  
  ff36c7f7a6175f22c58b18607f5f14e0
- SHA1
  
  5598d50faf1093e8f83d09055576a45f2e79c81e
- SHA256
  
  0d1fc25a00af2f8f8c2645797029f5432ebc65adedc368c69fa74cbc227dc995
- SHA512
  
  78f6d284bb66ddd57d2774144f8c258baf6a01d2c5ff2ef4ceabdd178bc67e512e8396821945244fe5985ff2834e650ef36334b49e195b9f44117ad367954bca
- SSDEEP
  
  1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi4Q:BbdDmjr+OtEvwDpjM8i
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2