1841e15ab75e2da7240031489526c069a4ebe1b55b8e82cee4fefb7de696afd9 | Triage

Sharing

General

Target

9723e08da1d1d7817e4587dda6694e10_NeikiAnalytics
Size

538KB
Sample

240511-hmhq7aed65
MD5

9723e08da1d1d7817e4587dda6694e10
SHA1

99975a13876b259edae190e60306a4449041b981
SHA256

1841e15ab75e2da7240031489526c069a4ebe1b55b8e82cee4fefb7de696afd9
SHA512

61ea1af5a6f7413de42c85cb2114a81577ece547ed97e80b3c2998b4f9f8f2749a1537df452b590daa8a07486a844aeaf087a728b4589f4619addc477c9f4929
SSDEEP

3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxp:wqDAwl0xPTMiR9JSSxPUKYGdodH0

Score

7^/10

Malware Config

Targets

- Target
  
  9723e08da1d1d7817e4587dda6694e10_NeikiAnalytics
- Size
  
  538KB
- MD5
  
  9723e08da1d1d7817e4587dda6694e10
- SHA1
  
  99975a13876b259edae190e60306a4449041b981
- SHA256
  
  1841e15ab75e2da7240031489526c069a4ebe1b55b8e82cee4fefb7de696afd9
- SHA512
  
  61ea1af5a6f7413de42c85cb2114a81577ece547ed97e80b3c2998b4f9f8f2749a1537df452b590daa8a07486a844aeaf087a728b4589f4619addc477c9f4929
- SSDEEP
  
  3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxp:wqDAwl0xPTMiR9JSSxPUKYGdodH0
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2