561815bcffb204f77b1fcb7ef61f617c01f2304e9c9766f86d0b847f89cd4a59 | Triage

Sharing

General

Target

cb2003fb62cf614ea94e614da88e6f20_NeikiAnalytics
Size

90KB
Sample

240514-r8mrpsbe6w
MD5

cb2003fb62cf614ea94e614da88e6f20
SHA1

cf36f562142e01c19f661090c1c381d6819f0a1d
SHA256

561815bcffb204f77b1fcb7ef61f617c01f2304e9c9766f86d0b847f89cd4a59
SHA512

56e6dfc6c06c8eee1ed2f7445d5d35e44ed52ddb4e2b1080f9c1f20762c67f294c77eba2829028faab1d03d7099f9a8e0c72912ea287495619caae421efa2082
SSDEEP

1536:DS7nK8eztdgI2MyzNORQtOflIwoHNV2XBFV72B4lA7ZsyPibdF45jYl7JJUj23pa:DJtdgI2MyzNORQtOflIwoHNV2XBFV72J

Score

7^/10

Malware Config

Targets

- Target
  
  cb2003fb62cf614ea94e614da88e6f20_NeikiAnalytics
- Size
  
  90KB
- MD5
  
  cb2003fb62cf614ea94e614da88e6f20
- SHA1
  
  cf36f562142e01c19f661090c1c381d6819f0a1d
- SHA256
  
  561815bcffb204f77b1fcb7ef61f617c01f2304e9c9766f86d0b847f89cd4a59
- SHA512
  
  56e6dfc6c06c8eee1ed2f7445d5d35e44ed52ddb4e2b1080f9c1f20762c67f294c77eba2829028faab1d03d7099f9a8e0c72912ea287495619caae421efa2082
- SSDEEP
  
  1536:DS7nK8eztdgI2MyzNORQtOflIwoHNV2XBFV72B4lA7ZsyPibdF45jYl7JJUj23pa:DJtdgI2MyzNORQtOflIwoHNV2XBFV72J
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2