General
- Target Rika.NET Setup.exe
- Size 35.7MB
- Sample260624-lmb57abs5w
- SHA256 f4f86a887b8fa3a7f6debd16f078ebaa9b593b198c9716ef3c4e7e4388365aa8
- MD5 9905dfc8e2b81378617d149e863989f6
- SHA1 1974b98861b6528f6efee316e1753912cb8da492
- SHA512 bc1fe56f74cf94798e8344163f70c32ecfbc87f21bafc0fea207ca2775eaeba88adcb33519b792654a0f96b6c2b6f25fb9f3a5ff84d1bce2da711878856724cd
- SSDEEP 786432:TFGhjADhcOsRtX4C6YIxLmcvQLZKVwwVmVe6XH5MMRi8XXqkt9kjZtoF:YmFcnRl4RFqcWhwlwZMkLnqYkjm
- TLSH T158873333725AA53AF0BE5B310A72D115103B7A50AE13CD9BEAE0146CDF246513E3B79B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Rika.NET Setup.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Rika.NET Setup.exe
Resource
win11ltsc2024-20260617-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Rika.NET Setup.exe
- Size 35.7MB
- SHA256 f4f86a887b8fa3a7f6debd16f078ebaa9b593b198c9716ef3c4e7e4388365aa8
- MD5 9905dfc8e2b81378617d149e863989f6
- SHA1 1974b98861b6528f6efee316e1753912cb8da492
- SHA512 bc1fe56f74cf94798e8344163f70c32ecfbc87f21bafc0fea207ca2775eaeba88adcb33519b792654a0f96b6c2b6f25fb9f3a5ff84d1bce2da711878856724cd
- SSDEEP 786432:TFGhjADhcOsRtX4C6YIxLmcvQLZKVwwVmVe6XH5MMRi8XXqkt9kjZtoF:YmFcnRl4RFqcWhwlwZMkLnqYkjm
- TLSH T158873333725AA53AF0BE5B310A72D115103B7A50AE13CD9BEAE0146CDF246513E3B79B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.