General
-
Target
05d0111438ca56e90e11127696e756f0_NeikiAnalytics.exe
-
Size
3.8MB
-
Sample
240617-1kcq9syhrn
-
MD5
05d0111438ca56e90e11127696e756f0
-
SHA1
41d214afbdc851b29a0b10e0c123d6de56e2f509
-
SHA256
c377e4b82be71062a55e9df1c7a89126877f6419990db21aa4863d838b891be7
-
SHA512
0acfaac07929ddf5bd39ac21664db4589c8cb5b9cd0742d93279751f737b8e8623fcc6ad5db5e909930a57779cdccfbdd96c0370baf4187eebd685ddccc30dc7
-
SSDEEP
49152:GOG6bXfJFfq5nxDzFKEj13Qe95zBsrDvLlN1kjUSKVW4LGlJW6L8:GOXulzv13P5zuWjUSKVW4yeK8
Behavioral task
behavioral1
Sample
05d0111438ca56e90e11127696e756f0_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
05d0111438ca56e90e11127696e756f0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
05d0111438ca56e90e11127696e756f0_NeikiAnalytics.exe
-
Size
3.8MB
-
MD5
05d0111438ca56e90e11127696e756f0
-
SHA1
41d214afbdc851b29a0b10e0c123d6de56e2f509
-
SHA256
c377e4b82be71062a55e9df1c7a89126877f6419990db21aa4863d838b891be7
-
SHA512
0acfaac07929ddf5bd39ac21664db4589c8cb5b9cd0742d93279751f737b8e8623fcc6ad5db5e909930a57779cdccfbdd96c0370baf4187eebd685ddccc30dc7
-
SSDEEP
49152:GOG6bXfJFfq5nxDzFKEj13Qe95zBsrDvLlN1kjUSKVW4LGlJW6L8:GOXulzv13P5zuWjUSKVW4yeK8
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-