General
-
Target
a3006353b1fb88e18007e4eeee765090_NeikiAnalytics
-
Size
207KB
-
Sample
240509-vta15sgd44
-
MD5
a3006353b1fb88e18007e4eeee765090
-
SHA1
7364ceda3702d6d96fb8b291a04ad55bbe745d08
-
SHA256
085c212ea9ca669f7e1d1d66d33d6ff1b27a9e83f2abd1df62021eba24d56b00
-
SHA512
a1b06a364b441eb33fe4be25f7e45d7aa19b11a9d6204a47eaced05c38e841a56487596f28d1a3934f35931b3110b21c2007701be7e976a12ba1898b0788a944
-
SSDEEP
3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+67bi83eILfbq5kmh:5Cswq+AXYu7HGOSuZAlAILjq
Behavioral task
behavioral1
Sample
a3006353b1fb88e18007e4eeee765090_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3006353b1fb88e18007e4eeee765090_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
amadey
3.81
http://77.91.124.20
-
install_dir
c3912af058
-
install_file
oneetx.exe
-
strings_key
0504ce46646b0dc397a3c30d6692ec75
-
url_paths
/store/games/index.php
Targets
-
-
Target
a3006353b1fb88e18007e4eeee765090_NeikiAnalytics
-
Size
207KB
-
MD5
a3006353b1fb88e18007e4eeee765090
-
SHA1
7364ceda3702d6d96fb8b291a04ad55bbe745d08
-
SHA256
085c212ea9ca669f7e1d1d66d33d6ff1b27a9e83f2abd1df62021eba24d56b00
-
SHA512
a1b06a364b441eb33fe4be25f7e45d7aa19b11a9d6204a47eaced05c38e841a56487596f28d1a3934f35931b3110b21c2007701be7e976a12ba1898b0788a944
-
SSDEEP
3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+67bi83eILfbq5kmh:5Cswq+AXYu7HGOSuZAlAILjq
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-