cf8fb79d9a1b1973589020ab6ca26baffcaafcd720407b327eccb54d1df0c569 | Triage

Sharing

General

Target

079c76e1bf070e7d5cff0a34f977b840_NeikiAnalytics.exe
Size

47KB
Sample

240527-wmcrtscd91
MD5

079c76e1bf070e7d5cff0a34f977b840
SHA1

b2e3d48da8f330c6142ac1e5858f653e0c3a509e
SHA256

cf8fb79d9a1b1973589020ab6ca26baffcaafcd720407b327eccb54d1df0c569
SHA512

6a0a599641aae31beaa517aca6ac7b62dd232e1e7ca4d7f7e551ff0efbadf0c95c5cfe0cbc625f8e0f301b9cb59bdfda23b980e182e1022fce253c3d3ff478e5
SSDEEP

384:ODIg+GkEkTfjJGRKthVGQMkqFfJokrvGB5vuv8rHVtsmln08ICHDuAYn1VCzLqEf:OIHfj3hVSRJt+UaVtN908DHDNzNRnC4X

Score

7^/10

Malware Config

Targets

- Target
  
  079c76e1bf070e7d5cff0a34f977b840_NeikiAnalytics.exe
- Size
  
  47KB
- MD5
  
  079c76e1bf070e7d5cff0a34f977b840
- SHA1
  
  b2e3d48da8f330c6142ac1e5858f653e0c3a509e
- SHA256
  
  cf8fb79d9a1b1973589020ab6ca26baffcaafcd720407b327eccb54d1df0c569
- SHA512
  
  6a0a599641aae31beaa517aca6ac7b62dd232e1e7ca4d7f7e551ff0efbadf0c95c5cfe0cbc625f8e0f301b9cb59bdfda23b980e182e1022fce253c3d3ff478e5
- SSDEEP
  
  384:ODIg+GkEkTfjJGRKthVGQMkqFfJokrvGB5vuv8rHVtsmln08ICHDuAYn1VCzLqEf:OIHfj3hVSRJt+UaVtN908DHDNzNRnC4X
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2