bf6a2c28da4c5f272fd68517b71aa63da8d214127f51b9d026e6698d2c6c91e3 | Triage

Sharing

General

Target

d0fe58a6ad4985c0252f6012b54d56f0_NeikiAnalytics
Size

72KB
Sample

240509-xwat9sdd75
MD5

d0fe58a6ad4985c0252f6012b54d56f0
SHA1

f61330214ffcd1d7c207ef3530f090559b5079ba
SHA256

bf6a2c28da4c5f272fd68517b71aa63da8d214127f51b9d026e6698d2c6c91e3
SHA512

a327895ac7686307499020bbe6a5d1bc3d471f5861a51c8d4d2b14f8e869152bc8fc5e48b6d3f41fae0815116c684630853987141074ce875774fa99142d037f
SSDEEP

768:OrItKyw5WHXfQmjIiIk9ecAakMb96ZyXuDLdibfffsffff2ZZZZ0:Or3Z5IfQmv81abyyXcZibfffsffffT

Score

8^/10

evasion

Malware Config

Targets

- Target
  
  d0fe58a6ad4985c0252f6012b54d56f0_NeikiAnalytics
- Size
  
  72KB
- MD5
  
  d0fe58a6ad4985c0252f6012b54d56f0
- SHA1
  
  f61330214ffcd1d7c207ef3530f090559b5079ba
- SHA256
  
  bf6a2c28da4c5f272fd68517b71aa63da8d214127f51b9d026e6698d2c6c91e3
- SHA512
  
  a327895ac7686307499020bbe6a5d1bc3d471f5861a51c8d4d2b14f8e869152bc8fc5e48b6d3f41fae0815116c684630853987141074ce875774fa99142d037f
- SSDEEP
  
  768:OrItKyw5WHXfQmjIiIk9ecAakMb96ZyXuDLdibfffsffff2ZZZZ0:Or3Z5IfQmv81abyyXcZibfffsffffT
Score

8^/10

evasion
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2