5e83c294b5d1cf237fae134f3cd8ec4447adb966cb795c9a639f02db5e55ce25 | Triage

Sharing

General

Target

37e9321a4d243f74069fd0e08bdda880_NEIKI
Size

25KB
Sample

240508-yzt8radd3t
MD5

37e9321a4d243f74069fd0e08bdda880
SHA1

3304876de03448e20c71eaaa0cddcd7dfb479e6c
SHA256

5e83c294b5d1cf237fae134f3cd8ec4447adb966cb795c9a639f02db5e55ce25
SHA512

6fa49626c801598616947351dfe5ef2100d3fa22d0b0e0867e8728226636c94252c1f116d01f7d7a334bffb67e4238c5e8bee2a3b873712fe6d975313a36ec36
SSDEEP

384:N5Q9DnNQvJ8Y3EAs0gA9tB/ezBRjEEEEEEEBGE9AbwuHVNSKZb:vENQBbw04B5EEEEEEEBGEKw0R1

Score

7^/10

Malware Config

Targets

- Target
  
  37e9321a4d243f74069fd0e08bdda880_NEIKI
- Size
  
  25KB
- MD5
  
  37e9321a4d243f74069fd0e08bdda880
- SHA1
  
  3304876de03448e20c71eaaa0cddcd7dfb479e6c
- SHA256
  
  5e83c294b5d1cf237fae134f3cd8ec4447adb966cb795c9a639f02db5e55ce25
- SHA512
  
  6fa49626c801598616947351dfe5ef2100d3fa22d0b0e0867e8728226636c94252c1f116d01f7d7a334bffb67e4238c5e8bee2a3b873712fe6d975313a36ec36
- SSDEEP
  
  384:N5Q9DnNQvJ8Y3EAs0gA9tB/ezBRjEEEEEEEBGE9AbwuHVNSKZb:vENQBbw04B5EEEEEEEBGEKw0R1
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2