Analysis

  • max time kernel
    140s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 21:34

General

  • Target

    0c180b4cc54d3d9e7bfd9efc40a44e70_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    0c180b4cc54d3d9e7bfd9efc40a44e70

  • SHA1

    fe6ea61bc105c8ceee20506b5b7a3a35e0bb939a

  • SHA256

    e1ca9f4bb27b44aade8727baf753578d8994d4a6dac2dca8612c121f543a1178

  • SHA512

    a966dcbe95b3eac209cd5c112555aeabb40c0d0ee9e71facefc1414d81475a7d37550461161acaa9c0259e3f129ee8ebdfa7beded29bd93715e820121466352a

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+UK:LJ0TAz6Mte4A+aaZx8EnCGVuU

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0c180b4cc54d3d9e7bfd9efc40a44e70_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0c180b4cc54d3d9e7bfd9efc40a44e70_NeikiAnalytics.exe"
    1⤵
      PID:2184

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-QS1bAghdbwvdqtVw.exe

            Filesize

            83KB

            MD5

            6db7ba97454289e6bb347b89da21d923

            SHA1

            50fec4b31369629422c380a2c2b16d477e925020

            SHA256

            9b689e0c9ca36e71ef5b06a9b949fa9711e0bfe340e50d65bddf056074607031

            SHA512

            3df8532761ef924afbbb018c0f8051aabaffd411b2671eb7378f9547cce021753f8cbfeacc7f64e7d17e4f9a3d113a1de44967aadd400c2bc9f56cd79e6ddcee

          • memory/2184-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2184-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2184-7-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2184-14-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2184-21-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2184-28-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB