4f162850cff0988fda1dc0c937da3fbe03116d6e0523a8c2088c9307a5de43d6 | Triage

Sharing

General

Target

15666f7b3fd21e01cad2fe513aae5de0_NeikiAnalytics
Size

36KB
Sample

240510-12exyscd7v
MD5

15666f7b3fd21e01cad2fe513aae5de0
SHA1

28cb122266be8b229337893c84e20a303395cade
SHA256

4f162850cff0988fda1dc0c937da3fbe03116d6e0523a8c2088c9307a5de43d6
SHA512

ef7139c70926687003e1a726a6150321d656bfd96529db2dbf1adafbeefd4704a957141860f1e589afc3224b33822ecb48f002435a5b661d551460d24082b5ef
SSDEEP

384:tYsx9c1H0QxeM6bcsu+je3ReNaa7Y9uziy9LsTLW1jJfm0DP20A48f/XeNaDK/:mszc5ejogavDyoOA0DTAheAK/

Score

7^/10

Malware Config

Targets

- Target
  
  15666f7b3fd21e01cad2fe513aae5de0_NeikiAnalytics
- Size
  
  36KB
- MD5
  
  15666f7b3fd21e01cad2fe513aae5de0
- SHA1
  
  28cb122266be8b229337893c84e20a303395cade
- SHA256
  
  4f162850cff0988fda1dc0c937da3fbe03116d6e0523a8c2088c9307a5de43d6
- SHA512
  
  ef7139c70926687003e1a726a6150321d656bfd96529db2dbf1adafbeefd4704a957141860f1e589afc3224b33822ecb48f002435a5b661d551460d24082b5ef
- SSDEEP
  
  384:tYsx9c1H0QxeM6bcsu+je3ReNaa7Y9uziy9LsTLW1jJfm0DP20A48f/XeNaDK/:mszc5ejogavDyoOA0DTAheAK/
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2