22bc034384e3eabaa6cb84f82f1bb21fb3db273d7988968d1d7ff22fd4031deb | Triage

Sharing

General

Target

82dc7b0bf5f13b2112d6c577ae425fd0_NeikiAnalytics
Size

232KB
Sample

240510-gf6c8seb9x
MD5

82dc7b0bf5f13b2112d6c577ae425fd0
SHA1

8cad0f0531f65a5caf0d493d2350d9f61dddd662
SHA256

22bc034384e3eabaa6cb84f82f1bb21fb3db273d7988968d1d7ff22fd4031deb
SHA512

b7c372eafa907d582d840146971033cbe1c950133d54ef5e1c7a14c698c67b34d4d41863666c30b8e74fd125c560314b90197ad5d92168a1e217c9b404ce9b6c
SSDEEP

3072:GwzKutalwhCjG8G3GbGVGBGfGuGxGWYcrf6KadE:GwOutalwAYcD6Kad

Score

7^/10

Malware Config

Targets

- Target
  
  82dc7b0bf5f13b2112d6c577ae425fd0_NeikiAnalytics
- Size
  
  232KB
- MD5
  
  82dc7b0bf5f13b2112d6c577ae425fd0
- SHA1
  
  8cad0f0531f65a5caf0d493d2350d9f61dddd662
- SHA256
  
  22bc034384e3eabaa6cb84f82f1bb21fb3db273d7988968d1d7ff22fd4031deb
- SHA512
  
  b7c372eafa907d582d840146971033cbe1c950133d54ef5e1c7a14c698c67b34d4d41863666c30b8e74fd125c560314b90197ad5d92168a1e217c9b404ce9b6c
- SSDEEP
  
  3072:GwzKutalwhCjG8G3GbGVGBGfGuGxGWYcrf6KadE:GwOutalwAYcD6Kad
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2