General
-
Target
0473b524e21ea497c7be4c40af6b380092443bd647dc336817095a5f504c0b0f_NeikiAnalytics.exe
-
Size
141KB
-
Sample
240701-yzsd6axcja
-
MD5
78b6a3a0e336856187f64585cf3ea0f0
-
SHA1
93b2adc86a79888b1089f79dae18183466d4b744
-
SHA256
0473b524e21ea497c7be4c40af6b380092443bd647dc336817095a5f504c0b0f
-
SHA512
05b5fdc5c56578d574f19ec66d054b80ef95f8a79090756a0fb524b5703127a191af17da65471e890027fc39eacf4c68bbf1efe31b50ea9f55c7773577852df7
-
SSDEEP
3072:7D8wMT6/JO6SaqLRuNw8niD0LdkD85eL/K:vMT6o6xO8ioGw5eL/K
Static task
static1
Behavioral task
behavioral1
Sample
0473b524e21ea497c7be4c40af6b380092443bd647dc336817095a5f504c0b0f_NeikiAnalytics.exe
Resource
win7-20240419-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
0473b524e21ea497c7be4c40af6b380092443bd647dc336817095a5f504c0b0f_NeikiAnalytics.exe
-
Size
141KB
-
MD5
78b6a3a0e336856187f64585cf3ea0f0
-
SHA1
93b2adc86a79888b1089f79dae18183466d4b744
-
SHA256
0473b524e21ea497c7be4c40af6b380092443bd647dc336817095a5f504c0b0f
-
SHA512
05b5fdc5c56578d574f19ec66d054b80ef95f8a79090756a0fb524b5703127a191af17da65471e890027fc39eacf4c68bbf1efe31b50ea9f55c7773577852df7
-
SSDEEP
3072:7D8wMT6/JO6SaqLRuNw8niD0LdkD85eL/K:vMT6o6xO8ioGw5eL/K
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-