01255fdff443246d7e5c51b8d844df18683fdd19b80c79374b2e030ab4b3cd2c | Triage

Sharing

General

Target

01255fdff443246d7e5c51b8d844df18683fdd19b80c79374b2e030ab4b3cd2c_NeikiAnalytics.exe
Size

30KB
Sample

240629-1cpe4azfkn
MD5

a4868ad63d22b2a4c079bfd7f7f14000
SHA1

fee39377dd70014c533bfd63d96385b2e2bf7e4e
SHA256

01255fdff443246d7e5c51b8d844df18683fdd19b80c79374b2e030ab4b3cd2c
SHA512

725ecae66c068455ca7d67a537728d37f84c067e9ced646c36f564d1ef62e244fa9570573a634bbfc8fb12affbdb037f1f33bd7b96239980cf45c36fc6cee7b7
SSDEEP

384:uhLCP1R8XnzvuwT0pZwBeH7lQDizU11u54TV0L4S0zaZFQU:cCcvuwU6eHhQDi41U4TGL10mZL

Score

7^/10

Malware Config

Targets

- Target
  
  01255fdff443246d7e5c51b8d844df18683fdd19b80c79374b2e030ab4b3cd2c_NeikiAnalytics.exe
- Size
  
  30KB
- MD5
  
  a4868ad63d22b2a4c079bfd7f7f14000
- SHA1
  
  fee39377dd70014c533bfd63d96385b2e2bf7e4e
- SHA256
  
  01255fdff443246d7e5c51b8d844df18683fdd19b80c79374b2e030ab4b3cd2c
- SHA512
  
  725ecae66c068455ca7d67a537728d37f84c067e9ced646c36f564d1ef62e244fa9570573a634bbfc8fb12affbdb037f1f33bd7b96239980cf45c36fc6cee7b7
- SSDEEP
  
  384:uhLCP1R8XnzvuwT0pZwBeH7lQDizU11u54TV0L4S0zaZFQU:cCcvuwU6eHhQDi41U4TGL10mZL
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2