General
-
Target
99b190ed6216121ae2891701a69dce80_NeikiAnalytics.exe
-
Size
6.4MB
-
Sample
240603-dwmdhshd4t
-
MD5
99b190ed6216121ae2891701a69dce80
-
SHA1
60f12632d15f201007941a3b785e236e0939ed22
-
SHA256
9f174ff451b88060789fe123b3ac78118c10ceb6c765e6b2e47dbb759b4ff4ab
-
SHA512
b528829f748b1b2bbb0e4b7cdfcbfe1676935211c9fb67a91f144cf06761bdca799c6f60576078781ab75651cb74ea92915ec5d5e0f255db35369565c76d2813
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSR:i0LrA2kHKQHNk3og9unipQyOaOR
Static task
static1
Behavioral task
behavioral1
Sample
99b190ed6216121ae2891701a69dce80_NeikiAnalytics.exe
Resource
win7-20240508-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
99b190ed6216121ae2891701a69dce80_NeikiAnalytics.exe
-
Size
6.4MB
-
MD5
99b190ed6216121ae2891701a69dce80
-
SHA1
60f12632d15f201007941a3b785e236e0939ed22
-
SHA256
9f174ff451b88060789fe123b3ac78118c10ceb6c765e6b2e47dbb759b4ff4ab
-
SHA512
b528829f748b1b2bbb0e4b7cdfcbfe1676935211c9fb67a91f144cf06761bdca799c6f60576078781ab75651cb74ea92915ec5d5e0f255db35369565c76d2813
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSR:i0LrA2kHKQHNk3og9unipQyOaOR
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-