General
-
Target
98dbaf52f24300963a2e22fc050731f0_NeikiAnalytics.exe
-
Size
1.6MB
-
Sample
240523-sfzfgafc2v
-
MD5
98dbaf52f24300963a2e22fc050731f0
-
SHA1
bfc539acf6960c420f17da0ce10bd32c34fe4d7f
-
SHA256
bcd36b36c97941cac7df9a87e59a235cc2419e88ecb354f0e8a0a22b9497cb47
-
SHA512
6f8e09f420fcdb47ea32d446d6af27d7cd5d405b6587b2958ecaa9b4a8ea08564bf47e9d637f3c081dee8692e175b86c40bb703dee284d261dd0901e7192132d
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvj7NaVNqd9OeSZXCdzvd4/iooIXsLq9Uab:Lz071uv4BPMkHC0IaSEzQR4iRLUUaao
Behavioral task
behavioral1
Sample
98dbaf52f24300963a2e22fc050731f0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
98dbaf52f24300963a2e22fc050731f0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
98dbaf52f24300963a2e22fc050731f0_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
98dbaf52f24300963a2e22fc050731f0
-
SHA1
bfc539acf6960c420f17da0ce10bd32c34fe4d7f
-
SHA256
bcd36b36c97941cac7df9a87e59a235cc2419e88ecb354f0e8a0a22b9497cb47
-
SHA512
6f8e09f420fcdb47ea32d446d6af27d7cd5d405b6587b2958ecaa9b4a8ea08564bf47e9d637f3c081dee8692e175b86c40bb703dee284d261dd0901e7192132d
-
SSDEEP
24576:zv3/fTLF671TilQFG4P5PMkUCCWvLEvj7NaVNqd9OeSZXCdzvd4/iooIXsLq9Uab:Lz071uv4BPMkHC0IaSEzQR4iRLUUaao
Score10/10-
XMRig Miner payload
-
Blocklisted process makes network request
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Legitimate hosting services abused for malware hosting/C2
-