3b3496a3fd50e4c79c96e2f10e7029424cc5fe77fe8d82a138ae1ff832eb1da5 | Triage

Sharing

General

Target

cf4d5870dca7ff111f25367288fa7bd0_NeikiAnalytics.exe
Size

534KB
Sample

240517-jbfccsfg78
MD5

cf4d5870dca7ff111f25367288fa7bd0
SHA1

66e4c9475623fdad1569b728eb03ccdd48269406
SHA256

3b3496a3fd50e4c79c96e2f10e7029424cc5fe77fe8d82a138ae1ff832eb1da5
SHA512

fa232af6e29dd6861c9e2b580300d71fec90b81e8cb7c6a7d402919998cd3b70dbc88b44d4c7e5561b0107f5137134d3a4aeeb046c9a67436411543ff504813e
SSDEEP

3072:XCaoAs101Pol0xPTM7mRCAdJSSxPUkl3V4Vh1q+MQTCk/dN92sdNhavtrVdewnAc:XqDAwl0xPTMiR9JSSxPUKuqododHYk

Score

7^/10

Malware Config

Targets

- Target
  
  cf4d5870dca7ff111f25367288fa7bd0_NeikiAnalytics.exe
- Size
  
  534KB
- MD5
  
  cf4d5870dca7ff111f25367288fa7bd0
- SHA1
  
  66e4c9475623fdad1569b728eb03ccdd48269406
- SHA256
  
  3b3496a3fd50e4c79c96e2f10e7029424cc5fe77fe8d82a138ae1ff832eb1da5
- SHA512
  
  fa232af6e29dd6861c9e2b580300d71fec90b81e8cb7c6a7d402919998cd3b70dbc88b44d4c7e5561b0107f5137134d3a4aeeb046c9a67436411543ff504813e
- SSDEEP
  
  3072:XCaoAs101Pol0xPTM7mRCAdJSSxPUkl3V4Vh1q+MQTCk/dN92sdNhavtrVdewnAc:XqDAwl0xPTMiR9JSSxPUKuqododHYk
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2