General
-
Target
6b48ed8f3626b6f56343450b50becea0_NeikiAnalytics
-
Size
54KB
-
Sample
240510-ey4agsea35
-
MD5
6b48ed8f3626b6f56343450b50becea0
-
SHA1
6645c793c7b654cdac62b2b6037cf109d2b792a6
-
SHA256
943cb65a7f7fa8fb3016f65056a7610eaaaf3d8eec7d3916e6a7b887bd0292c8
-
SHA512
15ae89c84b9a13193ede3dbc498d56899456c608b01c43139047aef17727e6bb1ad992a01142f0e674cb832e294e87ac33ebe00d56a09d6d7be821aad0ba7499
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHV:vMhAe5Zs091KI+JYixw49Xjrg
Static task
static1
Behavioral task
behavioral1
Sample
6b48ed8f3626b6f56343450b50becea0_NeikiAnalytics.exe
Resource
win7-20240220-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
6b48ed8f3626b6f56343450b50becea0_NeikiAnalytics
-
Size
54KB
-
MD5
6b48ed8f3626b6f56343450b50becea0
-
SHA1
6645c793c7b654cdac62b2b6037cf109d2b792a6
-
SHA256
943cb65a7f7fa8fb3016f65056a7610eaaaf3d8eec7d3916e6a7b887bd0292c8
-
SHA512
15ae89c84b9a13193ede3dbc498d56899456c608b01c43139047aef17727e6bb1ad992a01142f0e674cb832e294e87ac33ebe00d56a09d6d7be821aad0ba7499
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHV:vMhAe5Zs091KI+JYixw49Xjrg
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-