8f83362a79631f17f160fce2a03e0328eb84d032ffc9ec43e5ccb4e99106b015 | Triage

Sharing

General

Target

20240520914f851789a9a5754f83227676e464a0cryptolocker_NeikiAnalytics
Size

37KB
Sample

240521-j3524aea96
MD5

914f851789a9a5754f83227676e464a0
SHA1

27dbdaec99ee0459fd54384f2fcfa7b597790f39
SHA256

8f83362a79631f17f160fce2a03e0328eb84d032ffc9ec43e5ccb4e99106b015
SHA512

4eaf54fa15a7bb5ab29ca42f7d2fca9641807c4176ffa85ca6f9ad31f062fe82e7e69b81bee4531644f35720ce8eddab7158b74f01f8b33bca712f5c25050434
SSDEEP

384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSy37:btB9g/WItCSsAGjX7e9N0hunRvr

Score

7^/10

Malware Config

Targets

- Target
  
  20240520914f851789a9a5754f83227676e464a0cryptolocker_NeikiAnalytics
- Size
  
  37KB
- MD5
  
  914f851789a9a5754f83227676e464a0
- SHA1
  
  27dbdaec99ee0459fd54384f2fcfa7b597790f39
- SHA256
  
  8f83362a79631f17f160fce2a03e0328eb84d032ffc9ec43e5ccb4e99106b015
- SHA512
  
  4eaf54fa15a7bb5ab29ca42f7d2fca9641807c4176ffa85ca6f9ad31f062fe82e7e69b81bee4531644f35720ce8eddab7158b74f01f8b33bca712f5c25050434
- SSDEEP
  
  384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSy37:btB9g/WItCSsAGjX7e9N0hunRvr
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2