887376c474c6891d6374982e7f50779ff4bf4e0b6f739e16870cbcff78f9611f | Triage

Sharing

General

Target

e5bfc858958d395224e140aaa85b6080_NEIKI
Size

65KB
Sample

240508-shl8xsac5s
MD5

e5bfc858958d395224e140aaa85b6080
SHA1

41de7b5e0d24a50540420341e83c0f0183fa873d
SHA256

887376c474c6891d6374982e7f50779ff4bf4e0b6f739e16870cbcff78f9611f
SHA512

c099a9924328508ca8267fe38874bfc13377586aa2be827d878dbe1eeb0c0f579b28a3257684e4f872d6817117210c747501658541986ed5bb96e6e36eb735c2
SSDEEP

768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX60:Zr3Z5IfQIR81ad5yX60

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  e5bfc858958d395224e140aaa85b6080_NEIKI
- Size
  
  65KB
- MD5
  
  e5bfc858958d395224e140aaa85b6080
- SHA1
  
  41de7b5e0d24a50540420341e83c0f0183fa873d
- SHA256
  
  887376c474c6891d6374982e7f50779ff4bf4e0b6f739e16870cbcff78f9611f
- SHA512
  
  c099a9924328508ca8267fe38874bfc13377586aa2be827d878dbe1eeb0c0f579b28a3257684e4f872d6817117210c747501658541986ed5bb96e6e36eb735c2
- SSDEEP
  
  768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX60:Zr3Z5IfQIR81ad5yX60
Score

8^/10

evasion
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2