Overview

overview

7

Static

static

7

608085747a...KI.exe

windows7-x64

7

608085747a...KI.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    140s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-05-2024 10:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    608085747aaea9ae136970ccebef3d10_NEIKI.exe

  • Size

    83KB

  • MD5

    608085747aaea9ae136970ccebef3d10

  • SHA1

    b03f3a04c48af4b99c9b1ec93dcfeee9be583f0a

  • SHA256

    2cfa2aa2a4b4c5e558fd54c3a7f899bec131c6daf7d579a1b94e1d5970b57c70

  • SHA512

    ca3456840a136bb887db0266c768abf18743244564eccd404ffa2bcbb891fbedb23df180f9c718457febc9955daf4133ab809ea8338c6f4e57cc40e6adeeb805

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+GK:LJ0TAz6Mte4A+aaZx8EnCGVuG

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\608085747aaea9ae136970ccebef3d10_NEIKI.exe
    "C:\Users\Admin\AppData\Local\Temp\608085747aaea9ae136970ccebef3d10_NEIKI.exe"
    1⤵
      PID:2188

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-NlXQrxcC9bjsfPL3.exe
      Filesize

      83KB

      MD5

      07c871e388c1b2a2fed66531d07deebb

      SHA1

      77b7989bb3c7408b36d3c9cb68dfc6b918a36718

      SHA256

      f791949d0d32bcd0e5eb6483e539ba8ff75cdad7ab4863153391bd03ac345a9d

      SHA512

      1b9a0d5ba50471295d5d4841bada970f53ac7b05e1c5ff54840a09e9ee6faa765ae97017166c9591e19756dbaa40536904e54468305ad14bee0781bca57ab4ec

      Download Submit

    • memory/2188-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2188-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2188-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2188-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2188-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download

    • memory/2188-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

      Download