12c0ecef9899c2e19423283fa343a3eecfbe75ece71247fe92f38a5754244798 | Triage

Sharing

General

Target

458baada55e53a17210065b36bdef190_NEIKI
Size

403KB
Sample

240507-1tf52shh2x
MD5

458baada55e53a17210065b36bdef190
SHA1

30d0da757c1d9bc705f81c0c777d91a81b9cfb84
SHA256

12c0ecef9899c2e19423283fa343a3eecfbe75ece71247fe92f38a5754244798
SHA512

e2e26206f4656947c00b9c4f2d2757a99966a9dc196e6dba3edf1ede026bb49aeedd629a03e79fb032f63161807c190d5f8ce102bf2c1a1e32211d60be97b893
SSDEEP

1536:oXBYjfC24mFVsIgvo3X4iZpTha5VlA8mx7aoL83YTjipvF2PL:oX+0mFmIgvo4iZhha5rEaoL83YvQd2T

Score

7^/10

Malware Config

Targets

- Target
  
  458baada55e53a17210065b36bdef190_NEIKI
- Size
  
  403KB
- MD5
  
  458baada55e53a17210065b36bdef190
- SHA1
  
  30d0da757c1d9bc705f81c0c777d91a81b9cfb84
- SHA256
  
  12c0ecef9899c2e19423283fa343a3eecfbe75ece71247fe92f38a5754244798
- SHA512
  
  e2e26206f4656947c00b9c4f2d2757a99966a9dc196e6dba3edf1ede026bb49aeedd629a03e79fb032f63161807c190d5f8ce102bf2c1a1e32211d60be97b893
- SSDEEP
  
  1536:oXBYjfC24mFVsIgvo3X4iZpTha5VlA8mx7aoL83YTjipvF2PL:oX+0mFmIgvo4iZhha5rEaoL83YvQd2T
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2