General
-
Target
0caaf786c2cff4ddbb241e7f54d0e650_NeikiAnalytics.exe
-
Size
6.5MB
-
Sample
240601-3nr2gabf45
-
MD5
0caaf786c2cff4ddbb241e7f54d0e650
-
SHA1
4d53731555f3707dbfecdbe055b3c29b76842cf4
-
SHA256
69c41fa6554d4d4d993b56db84fa0673e759ddd97004ec75ec7708513521d4da
-
SHA512
c7d98f0cd3835a1538a1a324cef5ca27b08d4466351a298ea6e60e9be02973ffa7edf5a99ba5400f8a06f05d0bb04a4cb70d5899f4860635f88158252c40b1c6
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSu:i0LrA2kHKQHNk3og9unipQyOaOu
Static task
static1
Behavioral task
behavioral1
Sample
0caaf786c2cff4ddbb241e7f54d0e650_NeikiAnalytics.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
0caaf786c2cff4ddbb241e7f54d0e650_NeikiAnalytics.exe
-
Size
6.5MB
-
MD5
0caaf786c2cff4ddbb241e7f54d0e650
-
SHA1
4d53731555f3707dbfecdbe055b3c29b76842cf4
-
SHA256
69c41fa6554d4d4d993b56db84fa0673e759ddd97004ec75ec7708513521d4da
-
SHA512
c7d98f0cd3835a1538a1a324cef5ca27b08d4466351a298ea6e60e9be02973ffa7edf5a99ba5400f8a06f05d0bb04a4cb70d5899f4860635f88158252c40b1c6
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSu:i0LrA2kHKQHNk3og9unipQyOaOu
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-