General
-
Target
19451df9007da7ff2487be92a77fa250_NeikiAnalytics.exe
-
Size
3.1MB
-
Sample
240518-2ss9nacb8x
-
MD5
19451df9007da7ff2487be92a77fa250
-
SHA1
fca38124a0a074a09b1f34b322073acb2721b86e
-
SHA256
630001fa4519808fd9203d695549174388a58f1a164a0abe29478d3685a74f26
-
SHA512
80c62c24bd3a17fb0001074ab076a1d60ee65d39ada969c13d9057423fbcaaf447308712ec073c74c0e36e1131c10a4bdb86e9d03563f1fa2f447bb53f581dc9
-
SSDEEP
49152:4v5I22SsaNYfdPBldt698dBcjHj0+o+KMfutoGdZU8zTHHB72eh2NT:4v622SsaNYfdPBldt6+dBcjHj0+o+OJ
Behavioral task
behavioral1
Sample
19451df9007da7ff2487be92a77fa250_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19451df9007da7ff2487be92a77fa250_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
quasar
1.4.1
Hawa Slave
having-bunny.gl.at.ply.gg:32381
c043154e-c770-47c9-83a7-6cfcfe2e8a81
-
encryption_key
89EA4FFE5F728FABCCAA501D85497C89A98F95CB
-
install_name
powershell.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
svchost
-
subdirectory
SubDir
Targets
-
-
Target
19451df9007da7ff2487be92a77fa250_NeikiAnalytics.exe
-
Size
3.1MB
-
MD5
19451df9007da7ff2487be92a77fa250
-
SHA1
fca38124a0a074a09b1f34b322073acb2721b86e
-
SHA256
630001fa4519808fd9203d695549174388a58f1a164a0abe29478d3685a74f26
-
SHA512
80c62c24bd3a17fb0001074ab076a1d60ee65d39ada969c13d9057423fbcaaf447308712ec073c74c0e36e1131c10a4bdb86e9d03563f1fa2f447bb53f581dc9
-
SSDEEP
49152:4v5I22SsaNYfdPBldt698dBcjHj0+o+KMfutoGdZU8zTHHB72eh2NT:4v622SsaNYfdPBldt6+dBcjHj0+o+OJ
Score10/10-
Quasar payload
-
Executes dropped EXE
-