4149d0428bc035f874909e31561537dd3041ec8114e888172a126a1239c65f7f | Triage

Sharing

General

Target

ba2d1086b902c7dd020b6ef246ee36f0_NeikiAnalytics
Size

563KB
Sample

240509-wth77aaf83
MD5

ba2d1086b902c7dd020b6ef246ee36f0
SHA1

efd53015ca9671fb821d3bfd809061d3cba06867
SHA256

4149d0428bc035f874909e31561537dd3041ec8114e888172a126a1239c65f7f
SHA512

8b1b1f6599d36256fc17622992deb29fdffbeea93c5ff84e7c34d31b57605660bf42a57c1a3554007c3195e455387382c837e78eb8a53fa0dd02bd9505bbdb7f
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxk:dqDAwl0xPTMiR9JSSxPUKYGdodH7

Score

7^/10

Malware Config

Targets

- Target
  
  ba2d1086b902c7dd020b6ef246ee36f0_NeikiAnalytics
- Size
  
  563KB
- MD5
  
  ba2d1086b902c7dd020b6ef246ee36f0
- SHA1
  
  efd53015ca9671fb821d3bfd809061d3cba06867
- SHA256
  
  4149d0428bc035f874909e31561537dd3041ec8114e888172a126a1239c65f7f
- SHA512
  
  8b1b1f6599d36256fc17622992deb29fdffbeea93c5ff84e7c34d31b57605660bf42a57c1a3554007c3195e455387382c837e78eb8a53fa0dd02bd9505bbdb7f
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxk:dqDAwl0xPTMiR9JSSxPUKYGdodH7
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2