c2ff14215be5a0b0eab5d4ec5077a414adaf3a5dd4bc261e3ecfc25aca3494ac | Triage

Sharing

General

Target

05846ccd3a02284cffdd16570d2b6970_NeikiAnalytics
Size

43KB
Sample

240512-np2vqsgb66
MD5

05846ccd3a02284cffdd16570d2b6970
SHA1

3318b691e52a7d68171fab8679b251149f68fc9a
SHA256

c2ff14215be5a0b0eab5d4ec5077a414adaf3a5dd4bc261e3ecfc25aca3494ac
SHA512

bb803b2224e419892ef0148148fdf822fd41408fe828c569ce85c56dfc03b7da1b445b45b91423b4a34d633e111def61e4dd1b35a5f7f64bcbbbc9ca17eeed50
SSDEEP

768:+GG1xtqzC8JISj3KXW4KdwAx0U2G8DDuwEb3s1byf33W3kSoM6I:oxtnS1wzDFD1be4

Score

7^/10

Malware Config

Targets

- Target
  
  05846ccd3a02284cffdd16570d2b6970_NeikiAnalytics
- Size
  
  43KB
- MD5
  
  05846ccd3a02284cffdd16570d2b6970
- SHA1
  
  3318b691e52a7d68171fab8679b251149f68fc9a
- SHA256
  
  c2ff14215be5a0b0eab5d4ec5077a414adaf3a5dd4bc261e3ecfc25aca3494ac
- SHA512
  
  bb803b2224e419892ef0148148fdf822fd41408fe828c569ce85c56dfc03b7da1b445b45b91423b4a34d633e111def61e4dd1b35a5f7f64bcbbbc9ca17eeed50
- SSDEEP
  
  768:+GG1xtqzC8JISj3KXW4KdwAx0U2G8DDuwEb3s1byf33W3kSoM6I:oxtnS1wzDFD1be4
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2