7044ffcac6c1992f3bc03d3649caed711ab13236d8380901b73e7ba805d972da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

135375e0b3b86f8c6a8e966e478b8dd0_NeikiAnalytics
Size

522KB
Sample

240510-1xs9safa67
MD5

135375e0b3b86f8c6a8e966e478b8dd0
SHA1

feb542a56abeaf98b2b5de4d616414d2a8e33cbe
SHA256

7044ffcac6c1992f3bc03d3649caed711ab13236d8380901b73e7ba805d972da
SHA512

5e000dd2cf277cbed4a299472d0133eaf00ce4c7fdba219db0ddf42b1c3d45667d52bee8b988a89aaf3a45bd38c67619baaf6b03fe6e3fc999944c70f812c92e
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxv:dqDAwl0xPTMiR9JSSxPUKYGdodHO

Score

7^/10

Malware Config

Targets

- Target
  
  135375e0b3b86f8c6a8e966e478b8dd0_NeikiAnalytics
- Size
  
  522KB
- MD5
  
  135375e0b3b86f8c6a8e966e478b8dd0
- SHA1
  
  feb542a56abeaf98b2b5de4d616414d2a8e33cbe
- SHA256
  
  7044ffcac6c1992f3bc03d3649caed711ab13236d8380901b73e7ba805d972da
- SHA512
  
  5e000dd2cf277cbed4a299472d0133eaf00ce4c7fdba219db0ddf42b1c3d45667d52bee8b988a89aaf3a45bd38c67619baaf6b03fe6e3fc999944c70f812c92e
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxv:dqDAwl0xPTMiR9JSSxPUKYGdodHO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2