5007866c177cda4149bf5d25f2f5925d154952426458b82799bcba2d10591756 | Triage

Sharing

General

Target

949c828d8b1f17a913ff7b8649c30910_NeikiAnalytics
Size

1.0MB
Sample

240509-t9vvtaca9y
MD5

949c828d8b1f17a913ff7b8649c30910
SHA1

0837c63ee34e4929549b60cf75f240b4b42f9dcd
SHA256

5007866c177cda4149bf5d25f2f5925d154952426458b82799bcba2d10591756
SHA512

ee0daa3a89d39c81c98df73f27506b72b9957683b61cf2eaec8bcb3ba9a13a7be6e2bfe424ff9fe0a93f500604244d038894ee366b3b0f70cc194932a5541b07
SSDEEP

24576:wyVBoonDym54o9P3jLWl6XnTt5VAfQ8a/ZSbH77Lv+f6T8f:wyPbt3vWk5yQ8g4Hbg

Score

7^/10

Malware Config

Targets

- Target
  
  949c828d8b1f17a913ff7b8649c30910_NeikiAnalytics
- Size
  
  1.0MB
- MD5
  
  949c828d8b1f17a913ff7b8649c30910
- SHA1
  
  0837c63ee34e4929549b60cf75f240b4b42f9dcd
- SHA256
  
  5007866c177cda4149bf5d25f2f5925d154952426458b82799bcba2d10591756
- SHA512
  
  ee0daa3a89d39c81c98df73f27506b72b9957683b61cf2eaec8bcb3ba9a13a7be6e2bfe424ff9fe0a93f500604244d038894ee366b3b0f70cc194932a5541b07
- SSDEEP
  
  24576:wyVBoonDym54o9P3jLWl6XnTt5VAfQ8a/ZSbH77Lv+f6T8f:wyPbt3vWk5yQ8g4Hbg
Score

7^/10
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2