General
-
Target
080084c285683066d6c5b41f76b3b430_NeikiAnalytics.exe
-
Size
205KB
-
Sample
240526-2e1rksed6t
-
MD5
080084c285683066d6c5b41f76b3b430
-
SHA1
524b4631a18e977c93c474c09b32f806129d165c
-
SHA256
c4f30b93fd4341190482e6d81ac4bb149be4647dd994b0919e96c20312167004
-
SHA512
a8561a0edc32d4f5d28942cabd5b6c45b8c666bceb6a0a983e1a90f34f91894598a3c056ae5d29a6d3b4db560ac5b6ae469cd10ed118799c605b7c9df5570edd
-
SSDEEP
3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAItb2y3xfpT:8kSDAzG1iciuInRexuZAIvx
Behavioral task
behavioral1
Sample
080084c285683066d6c5b41f76b3b430_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
080084c285683066d6c5b41f76b3b430_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
amadey
3.84
2f2805
http://77.91.68.63
-
install_dir
200f691d32
-
install_file
rugen.exe
-
strings_key
e6ad3da56139a7f602e521090c482398
-
url_paths
/doma/net/index.php
Targets
-
-
Target
080084c285683066d6c5b41f76b3b430_NeikiAnalytics.exe
-
Size
205KB
-
MD5
080084c285683066d6c5b41f76b3b430
-
SHA1
524b4631a18e977c93c474c09b32f806129d165c
-
SHA256
c4f30b93fd4341190482e6d81ac4bb149be4647dd994b0919e96c20312167004
-
SHA512
a8561a0edc32d4f5d28942cabd5b6c45b8c666bceb6a0a983e1a90f34f91894598a3c056ae5d29a6d3b4db560ac5b6ae469cd10ed118799c605b7c9df5570edd
-
SSDEEP
3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAItb2y3xfpT:8kSDAzG1iciuInRexuZAIvx
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-