General

  • Target

    cb172c57749f56c77a42e5488708cdc0_NeikiAnalytics

  • Size

    537KB

  • Sample

    240514-r7g5tsbg64

  • MD5

    cb172c57749f56c77a42e5488708cdc0

  • SHA1

    d398746fe88bd5f5f5521e775b470428e7783d59

  • SHA256

    23984adaaff88a2b0fcc122bbd74033144c7a6c8ed00d1e5b6d47662db124713

  • SHA512

    eab7f6d5f8dd47890851040daf6c263b20ce7d4659c4edb1512f69de979e56b6700cfaa797a65f1df5d061453929d7d12e8fc4c391d73280436fbfd38d9ca1f8

  • SSDEEP

    3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxu:wqDAwl0xPTMiR9JSSxPUKYGdodHN

Score
7/10

Malware Config

Targets

    • Target

      cb172c57749f56c77a42e5488708cdc0_NeikiAnalytics

    • Size

      537KB

    • MD5

      cb172c57749f56c77a42e5488708cdc0

    • SHA1

      d398746fe88bd5f5f5521e775b470428e7783d59

    • SHA256

      23984adaaff88a2b0fcc122bbd74033144c7a6c8ed00d1e5b6d47662db124713

    • SHA512

      eab7f6d5f8dd47890851040daf6c263b20ce7d4659c4edb1512f69de979e56b6700cfaa797a65f1df5d061453929d7d12e8fc4c391d73280436fbfd38d9ca1f8

    • SSDEEP

      3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxu:wqDAwl0xPTMiR9JSSxPUKYGdodHN

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks