07a6e7903b817939e4b4457509ed6ac43c208baa4bd1057f37230d6ef292d887 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07a6e7903b817939e4b4457509ed6ac43c208baa4bd1057f37230d6ef292d887_NeikiAnalytics.exe
Size

1.2MB
Sample

240627-tqwm1azajd
MD5

e89d082ae148569420924ccd17af1220
SHA1

8ba80dbfe3182a9521adaa3423f13e766695560f
SHA256

07a6e7903b817939e4b4457509ed6ac43c208baa4bd1057f37230d6ef292d887
SHA512

b5f738f50ff0fbd3306b9e58af34ca81a642af2435ad1375cc5575f7624fce2cdb5f12a20f707000b0f06431d3d7e9819b45871cb6a81f77653e07e5f8ef0d77
SSDEEP

24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAip:IylFHUv6ReIt0jSrOS

Score

7^/10

Malware Config

Targets

- Target
  
  07a6e7903b817939e4b4457509ed6ac43c208baa4bd1057f37230d6ef292d887_NeikiAnalytics.exe
- Size
  
  1.2MB
- MD5
  
  e89d082ae148569420924ccd17af1220
- SHA1
  
  8ba80dbfe3182a9521adaa3423f13e766695560f
- SHA256
  
  07a6e7903b817939e4b4457509ed6ac43c208baa4bd1057f37230d6ef292d887
- SHA512
  
  b5f738f50ff0fbd3306b9e58af34ca81a642af2435ad1375cc5575f7624fce2cdb5f12a20f707000b0f06431d3d7e9819b45871cb6a81f77653e07e5f8ef0d77
- SSDEEP
  
  24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAip:IylFHUv6ReIt0jSrOS
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2