c2d58a8eb3253ff4eb94c36364c163ea78260fe8d06ce9ba60df1f414a8a7cf0 | Triage

Sharing

General

Target

4c91f9d9512faad77c49ae9c89246070_NeikiAnalytics.exe
Size

539KB
Sample

240529-j76jeshb24
MD5

4c91f9d9512faad77c49ae9c89246070
SHA1

27a67a995b7c172d63f76dbc58e66283f34ae9c2
SHA256

c2d58a8eb3253ff4eb94c36364c163ea78260fe8d06ce9ba60df1f414a8a7cf0
SHA512

76d561c4f4c65fe35e430422566997f0e5699734c0b4825984e0a33fa896df4b30afab03c2d52028294e236bf63bef5693d8e7dd650ebdf1c6d39a4dd1756d82
SSDEEP

3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxy:wqDAwl0xPTMiR9JSSxPUKYGdodHh

Score

7^/10

Malware Config

Targets

- Target
  
  4c91f9d9512faad77c49ae9c89246070_NeikiAnalytics.exe
- Size
  
  539KB
- MD5
  
  4c91f9d9512faad77c49ae9c89246070
- SHA1
  
  27a67a995b7c172d63f76dbc58e66283f34ae9c2
- SHA256
  
  c2d58a8eb3253ff4eb94c36364c163ea78260fe8d06ce9ba60df1f414a8a7cf0
- SHA512
  
  76d561c4f4c65fe35e430422566997f0e5699734c0b4825984e0a33fa896df4b30afab03c2d52028294e236bf63bef5693d8e7dd650ebdf1c6d39a4dd1756d82
- SSDEEP
  
  3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxy:wqDAwl0xPTMiR9JSSxPUKYGdodHh
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2