4c8ba40d8d70f3eec35502503244384793413f5b9e4efcb8576dbee92aa2986a | Triage

Sharing

General

Target

37032fa37ef6f45e365a9814036479f0_NEIKI
Size

36KB
Sample

240508-kt8masce3v
MD5

37032fa37ef6f45e365a9814036479f0
SHA1

f49077316bcb6837adcbb6e877f9f5d55e46d328
SHA256

4c8ba40d8d70f3eec35502503244384793413f5b9e4efcb8576dbee92aa2986a
SHA512

9d0587ad992458bf5e38553179c7358be5b1bc59131ddd22c04af3fd3ec364c85dedf48cb8bdb98bc5a0d4749b16ac12a1ce41c571c16a646d780f808531af45
SSDEEP

768:IY2vb9V6drHOYLES5LbyZWBxf6fVxKfOoePtSYDi:52vb941RR5iZWLWfi

Score

7^/10

Malware Config

Targets

- Target
  
  37032fa37ef6f45e365a9814036479f0_NEIKI
- Size
  
  36KB
- MD5
  
  37032fa37ef6f45e365a9814036479f0
- SHA1
  
  f49077316bcb6837adcbb6e877f9f5d55e46d328
- SHA256
  
  4c8ba40d8d70f3eec35502503244384793413f5b9e4efcb8576dbee92aa2986a
- SHA512
  
  9d0587ad992458bf5e38553179c7358be5b1bc59131ddd22c04af3fd3ec364c85dedf48cb8bdb98bc5a0d4749b16ac12a1ce41c571c16a646d780f808531af45
- SSDEEP
  
  768:IY2vb9V6drHOYLES5LbyZWBxf6fVxKfOoePtSYDi:52vb941RR5iZWLWfi
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2