98b2b0f391a6e8d3a7375e0155cfe5e449cad146e82781bf4744719aa89dbffa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98b2b0f391a6e8d3a7375e0155cfe5e449cad146e82781bf4744719aa89dbffa_NeikiAnalytics.exe
Size

14KB
Sample

240628-p3tlystbkn
MD5

e5e639401553576dc388d0f4ebe94300
SHA1

26a99e2f188e3190b8049872d19f7a1bfe515da2
SHA256

98b2b0f391a6e8d3a7375e0155cfe5e449cad146e82781bf4744719aa89dbffa
SHA512

1cd786d9112b35b6de65007f954097e0133dada7fe24ec0df36fa4c481ccd962b5b671b374e2f90dbefd4bc32503627411327b453dd864b1a13908708b9c7b45
SSDEEP

384:9cd6w+NomiUBQZVoRiCKKtYh2pNvdAaurNp:qIomvQ7oTOUVAaurNp

Score

7^/10

Malware Config

Targets

- Target
  
  98b2b0f391a6e8d3a7375e0155cfe5e449cad146e82781bf4744719aa89dbffa_NeikiAnalytics.exe
- Size
  
  14KB
- MD5
  
  e5e639401553576dc388d0f4ebe94300
- SHA1
  
  26a99e2f188e3190b8049872d19f7a1bfe515da2
- SHA256
  
  98b2b0f391a6e8d3a7375e0155cfe5e449cad146e82781bf4744719aa89dbffa
- SHA512
  
  1cd786d9112b35b6de65007f954097e0133dada7fe24ec0df36fa4c481ccd962b5b671b374e2f90dbefd4bc32503627411327b453dd864b1a13908708b9c7b45
- SSDEEP
  
  384:9cd6w+NomiUBQZVoRiCKKtYh2pNvdAaurNp:qIomvQ7oTOUVAaurNp
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2