daf26b3b726b85f22998c4f97d80a570cebda4a43afe7247621c23ebdc2833e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a06c19a16fc722b1ed2a3041dfad4310_NeikiAnalytics
Size

91KB
Sample

240516-frc1dsdb5z
MD5

a06c19a16fc722b1ed2a3041dfad4310
SHA1

d511b990513e48ec11794bbd16e62c27ba3ae485
SHA256

daf26b3b726b85f22998c4f97d80a570cebda4a43afe7247621c23ebdc2833e9
SHA512

fe4cffbdde023406e04aa618451dd775a4c9633b66b51b07100ac1cd3ac27ccb339f93a8bc8e479fc729fe2c7461e81b546373692ed2d5845e538f4565c3d321
SSDEEP

1536:tzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcy:5fMNE1JG6XMk27EbpOthl0ZUed0y

Score

7^/10

Malware Config

Targets

- Target
  
  a06c19a16fc722b1ed2a3041dfad4310_NeikiAnalytics
- Size
  
  91KB
- MD5
  
  a06c19a16fc722b1ed2a3041dfad4310
- SHA1
  
  d511b990513e48ec11794bbd16e62c27ba3ae485
- SHA256
  
  daf26b3b726b85f22998c4f97d80a570cebda4a43afe7247621c23ebdc2833e9
- SHA512
  
  fe4cffbdde023406e04aa618451dd775a4c9633b66b51b07100ac1cd3ac27ccb339f93a8bc8e479fc729fe2c7461e81b546373692ed2d5845e538f4565c3d321
- SSDEEP
  
  1536:tzfMMkPZE1J7S6/PMj42VJEY4ujMepJtANuOAl0QQsIEySYndfcy:5fMNE1JG6XMk27EbpOthl0ZUed0y
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2