General

  • Target

    9f72275752cf5f64f40a202dba075120_NeikiAnalytics.exe

  • Size

    324KB

  • MD5

    9f72275752cf5f64f40a202dba075120

  • SHA1

    cf7329a13fa9a9e141a1e7d6e7ace5da4db0fa61

  • SHA256

    14f58b1b9bf4a0af1901bf4aca642e3e82a9c81900bce7fa287638a028e8c383

  • SHA512

    004add32de4bbc8da550804c0d6dbdda8d3e6fd11a467e0ee3cd52ae02537a2e91a872845cee58bbd37685c0280304aa261363b6291f15bb1689e301cefa1ad6

  • SSDEEP

    6144:msYSsp5yL23j0Tj4M6aW4I7NMk5B8k3qX/SCm63P8nAO8XZESqAguOSfmiC7smG:msYSsp5R3j0Tj4XaW4I7NM0B9a0dyjLf

Score
10/10

Malware Config

Extracted

Family

gcleaner

C2

45.12.253.56

45.12.253.72

45.12.253.98

45.12.253.75

Attributes
  • url_path

    /default/puk.php

Signatures

  • Gcleaner family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9f72275752cf5f64f40a202dba075120_NeikiAnalytics.exe
    .exe windows:6 windows x86 arch:x86

    01e28360e3d419170740bd05c96866de


    Headers

    Imports

    Sections