Analysis

  • max time kernel
    141s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 21:30

General

  • Target

    024578ab95f8e4848b69294c70fa1ea0_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    024578ab95f8e4848b69294c70fa1ea0

  • SHA1

    21ca3b41e898d518f3151adf6c957ca41e1917fe

  • SHA256

    e68724d42be80397edbb68d03fa9dfd9ed0312203ff4e91126988dfdbf8bfdcb

  • SHA512

    45f18f8ed065c76b93e97563ec96c58579592fed0d461e51f14cd6f8c39a638b54384f314e0fcf29621dae95adda101df56e4628156cf4d65fbdecdb3737e6da

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+8K:LJ0TAz6Mte4A+aaZx8EnCGVu8

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\024578ab95f8e4848b69294c70fa1ea0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\024578ab95f8e4848b69294c70fa1ea0_NeikiAnalytics.exe"
    1⤵
      PID:640

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-iQgbzdhXPETKr8wN.exe

      Filesize

      83KB

      MD5

      ecd657416582983f11ab64c6efb53a42

      SHA1

      b8c664f5243bf443b838f78ecdac7922068020c6

      SHA256

      48117d13f104bf2f4167c4adb605b3be7c50df6f56aa85bd0b0493688ee52ca8

      SHA512

      b9e8cdef3ac1c045ccdc599acc434ba0eb4ee4c61d9991cd9e7f4c15c5ce6d82ebea925cf0376e054fdb6515fc464ef7307214931a006292492c4ec8981198cb

    • memory/640-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/640-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/640-5-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/640-13-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/640-20-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/640-27-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB