Overview

overview

7

Static

static

7

4a5912fbe4...cs.exe

windows7-x64

7

4a5912fbe4...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 13:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4a5912fbe47c480970424e1263dfe570_NeikiAnalytics.exe

  • Size

    3.8MB

  • MD5

    4a5912fbe47c480970424e1263dfe570

  • SHA1

    76f7373cb084b6fbf0c368b9b75a56d07ae62d4b

  • SHA256

    f4b4da62093a52c4f08b55c496e318e3f93bfad94543f62c314e080f3adce732

  • SHA512

    a96a99d9e10439b1c7645df5a7fd9526ff1df9cff9ac5bd8992ef05757436c4901f402efbb2f9d9b7ebd455ba10996ba4ceff1cd4cfa4e9e42dbcd3c1a8103be

  • SSDEEP

    98304:YbA8IVdkKhL8Z57fyLB/K0P7eKiG1AYzQPqRA:Y2wcL87GLE0DeB3BPiA

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Processes

  • C:\Users\Admin\AppData\Local\Temp\4a5912fbe47c480970424e1263dfe570_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4a5912fbe47c480970424e1263dfe570_NeikiAnalytics.exe"
    1⤵
      PID:2228

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2228-0-0x00000000008D0000-0x00000000011D0000-memory.dmp

      Filesize

      9.0MB

      Download

    • memory/2228-1-0x0000000075051000-0x0000000075052000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2228-2-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-3-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-4-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-5-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-6-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-7-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-8-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-9-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-10-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-12-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-11-0x0000000075051000-0x0000000075052000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2228-14-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-13-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-15-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-17-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-16-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-18-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-19-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-20-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-21-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-22-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-23-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-24-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-25-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2228-27-0x00000000008D0000-0x00000000011D0000-memory.dmp

      Filesize

      9.0MB

      Download

    • memory/2228-28-0x0000000075040000-0x0000000075150000-memory.dmp

      Filesize

      1.1MB

      Download