5f64ade2193f8225b590b6741a4bdc0e720cda8775075f314ade8d167ce6d184 | Triage

Sharing

General

Target

a74370ab2b1b56fc7ee6e533ee312440_NeikiAnalytics
Size

38KB
Sample

240511-j7m23sgd31
MD5

a74370ab2b1b56fc7ee6e533ee312440
SHA1

f051f89cc73a533176d0fa24760c748dd286957c
SHA256

5f64ade2193f8225b590b6741a4bdc0e720cda8775075f314ade8d167ce6d184
SHA512

f7576d5bd1f0f24e9fa09c7a2f3091dca96b5f3f4993f24c96e8ae099f6c5b0db582ee164e7198b87dd25235cc618fecccf93a93c7abc2c30ff4f6bc53bc4eb8
SSDEEP

768:NLhcSDgpxUueqk230wHmIOdic+AvALEJ0X/t8X:NLhcRLleqk4rTOdbvAwx

Score

7^/10

Malware Config

Targets

- Target
  
  a74370ab2b1b56fc7ee6e533ee312440_NeikiAnalytics
- Size
  
  38KB
- MD5
  
  a74370ab2b1b56fc7ee6e533ee312440
- SHA1
  
  f051f89cc73a533176d0fa24760c748dd286957c
- SHA256
  
  5f64ade2193f8225b590b6741a4bdc0e720cda8775075f314ade8d167ce6d184
- SHA512
  
  f7576d5bd1f0f24e9fa09c7a2f3091dca96b5f3f4993f24c96e8ae099f6c5b0db582ee164e7198b87dd25235cc618fecccf93a93c7abc2c30ff4f6bc53bc4eb8
- SSDEEP
  
  768:NLhcSDgpxUueqk230wHmIOdic+AvALEJ0X/t8X:NLhcRLleqk4rTOdbvAwx
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2