Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-05-2024 15:08

General

  • Target

    6ccbb5471e4a96a55c428c2153c30cc0_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    6ccbb5471e4a96a55c428c2153c30cc0

  • SHA1

    e928289bf183e8b4b8bf0ecf7ba4fe61ac9f8d1e

  • SHA256

    71a5f64903631d9cf3f81e58f3a9a8d6ac0f3ada200a55ea40b61cad1f58c606

  • SHA512

    52a96fa319b134d5258ce3ad80d3d2ed74f537bdda8bd4b27b15ac3bf7ac68a37c086f9a458baae87ae2d41d5e13de5371b42ea6c234378d0965ebbce8554612

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+1K:LJ0TAz6Mte4A+aaZx8EnCGVu1

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6ccbb5471e4a96a55c428c2153c30cc0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\6ccbb5471e4a96a55c428c2153c30cc0_NeikiAnalytics.exe"
    1⤵
      PID:2824

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-psP3knxXiXeLadTL.exe

      Filesize

      83KB

      MD5

      dde943276358a3149698f32dc0ea59c0

      SHA1

      c8f2e1591d125c53428edeb5542c227bde246ef8

      SHA256

      222e49577131b6112960d4b58f491765515433803f54578136b2e56382f6df8e

      SHA512

      75b432b2afb3804be5cb3aeb1676a2f1031acdce828fdc28b4a1d971279b557520e1cd14113ffda225a3d27e8d5e7a3f8ec2ab733d6b487649924686d4a3fc33

    • memory/2824-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2824-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2824-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2824-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2824-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2824-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB