4d9d3807523a022847328c9c9d118cae2284af2290e3fe188d66085d0b109fa9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d9d3807523a022847328c9c9d118cae2284af2290e3fe188d66085d0b109fa9_NeikiAnalytics.exe
Size

84KB
Sample

240701-nc6m6ayckg
MD5

309da233b109548ab2082d586ed32580
SHA1

96ffc7570baa1a5cce268d3cd977038b53c33e49
SHA256

4d9d3807523a022847328c9c9d118cae2284af2290e3fe188d66085d0b109fa9
SHA512

486db6a9dc11c255b788b5645ed19546a27d56fd9a39d531a65d920e37fc10ccdb42f41a3b49d01e442e0bb5961e1c77facb7020d2b0a6a13d25426037a7a221
SSDEEP

1536:IGsBuoFn7UZ+LtdgI2MyzNORQtOflIwoHNV2XBFV72B4lA7ZsbI8zYeDds:IGjot7UQLtdgI2MyzNORQtOflIwoHNV/

Score

7^/10

Malware Config

Targets

- Target
  
  4d9d3807523a022847328c9c9d118cae2284af2290e3fe188d66085d0b109fa9_NeikiAnalytics.exe
- Size
  
  84KB
- MD5
  
  309da233b109548ab2082d586ed32580
- SHA1
  
  96ffc7570baa1a5cce268d3cd977038b53c33e49
- SHA256
  
  4d9d3807523a022847328c9c9d118cae2284af2290e3fe188d66085d0b109fa9
- SHA512
  
  486db6a9dc11c255b788b5645ed19546a27d56fd9a39d531a65d920e37fc10ccdb42f41a3b49d01e442e0bb5961e1c77facb7020d2b0a6a13d25426037a7a221
- SSDEEP
  
  1536:IGsBuoFn7UZ+LtdgI2MyzNORQtOflIwoHNV2XBFV72B4lA7ZsbI8zYeDds:IGjot7UQLtdgI2MyzNORQtOflIwoHNV/
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2