8e4485922a59988de103a0a47d784f8bd837a679f67c87e8711324319146caf7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8db0c2e59f6a7395f47f81c4ee81b40_NEIKI
Size

53KB
Sample

240508-gfr6lsdf6v
MD5

e8db0c2e59f6a7395f47f81c4ee81b40
SHA1

684b580a85a6e7e0c080395f0279e2977ce3644a
SHA256

8e4485922a59988de103a0a47d784f8bd837a679f67c87e8711324319146caf7
SHA512

d97224cf5e99250bcff8a862a5747f64ae60549263c02b2608f6889bf62056734be6ec46653a0d7a7fe24bf386504e765d192a8fcba5744a619cc7c8c9228cce
SSDEEP

768:AzCzDHjqcg3fwgpYK/k59zck/fDBmaXjWDrNKgUOOm58yOqIXEErRSASE:fM3fiXjWvNKCOm53OqRJtE

Score

7^/10

Malware Config

Targets

- Target
  
  e8db0c2e59f6a7395f47f81c4ee81b40_NEIKI
- Size
  
  53KB
- MD5
  
  e8db0c2e59f6a7395f47f81c4ee81b40
- SHA1
  
  684b580a85a6e7e0c080395f0279e2977ce3644a
- SHA256
  
  8e4485922a59988de103a0a47d784f8bd837a679f67c87e8711324319146caf7
- SHA512
  
  d97224cf5e99250bcff8a862a5747f64ae60549263c02b2608f6889bf62056734be6ec46653a0d7a7fe24bf386504e765d192a8fcba5744a619cc7c8c9228cce
- SSDEEP
  
  768:AzCzDHjqcg3fwgpYK/k59zck/fDBmaXjWDrNKgUOOm58yOqIXEErRSASE:fM3fiXjWvNKCOm53OqRJtE
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2