9c015ffd8c24188cb768beb5b2fbcb8298f29d416c6c16f4ad1888d570107578 | Triage

Sharing

General

Target

9c015ffd8c24188cb768beb5b2fbcb8298f29d416c6c16f4ad1888d570107578_NeikiAnalytics.exe
Size

6KB
Sample

240628-rm299stfpf
MD5

c204ace6e60ccca66ba47784612cbd50
SHA1

dbfa819023002d0c53d99f1881be45bf5317be4a
SHA256

9c015ffd8c24188cb768beb5b2fbcb8298f29d416c6c16f4ad1888d570107578
SHA512

5cee1002e75a5c32f0689b92b523115c0402c915350aa1eef75db69f4317645488fa3d790ce726c7cc00110e5ff0366d040fe565696b0a3509f544fe494d6344
SSDEEP

96:9uKB7r0gHNw0iNwOBVKXbUp8wAnQWRRU1xXHZFYRUd6oZSFI2+hKVo:kKhDt6N7VKQWRREHZuTI5r

Score

7^/10

Malware Config

Targets

- Target
  
  9c015ffd8c24188cb768beb5b2fbcb8298f29d416c6c16f4ad1888d570107578_NeikiAnalytics.exe
- Size
  
  6KB
- MD5
  
  c204ace6e60ccca66ba47784612cbd50
- SHA1
  
  dbfa819023002d0c53d99f1881be45bf5317be4a
- SHA256
  
  9c015ffd8c24188cb768beb5b2fbcb8298f29d416c6c16f4ad1888d570107578
- SHA512
  
  5cee1002e75a5c32f0689b92b523115c0402c915350aa1eef75db69f4317645488fa3d790ce726c7cc00110e5ff0366d040fe565696b0a3509f544fe494d6344
- SSDEEP
  
  96:9uKB7r0gHNw0iNwOBVKXbUp8wAnQWRRU1xXHZFYRUd6oZSFI2+hKVo:kKhDt6N7VKQWRREHZuTI5r
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2