Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/05/2024, 02:35

General

  • Target

    4f4017dfc715a9239e70c1c3f12e1ce0_NeikiAnalytics.exe

  • Size

    44KB

  • MD5

    4f4017dfc715a9239e70c1c3f12e1ce0

  • SHA1

    88ce5f0a0e7a631ad4aff362f8b104a5e1e4b4f4

  • SHA256

    32c93b8ffcb9daa22a6f2a5f4ac9038976b28fe206e19d8efd497bf82b7f8fb0

  • SHA512

    cbe9709b3a8cd4d2c6372f4434e2d7abb870458fc5646ed9c59fed52c2e883b3d81fe1ccbce7afb4451ab77205934545808a717213664bf8f968b778a34b8a7c

  • SSDEEP

    768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCikGF2xdKJCh5PTnEMen6X2L7UAv7XZ:IHzzeWHXbJGB2EOikptEMs6XW7U0Z

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\4f4017dfc715a9239e70c1c3f12e1ce0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4f4017dfc715a9239e70c1c3f12e1ce0_NeikiAnalytics.exe"
    1⤵
      PID:4500

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\My Downloads\Crazy Taxi Full Downloader.exe

      Filesize

      44KB

      MD5

      cffd5733186bc49fd6cc7a510dbcaeaa

      SHA1

      b3c6aa37f8a54b17ae1e550484613396e1a21cfe

      SHA256

      3262bc9dd3430e2d553aa2f6b8be665a951632f42d438054c372b3de5c3723ea

      SHA512

      b7606668dec3f8f40bc92e273c6f8cf9220925d6b8c9f1990e43b2802ee1d5ed938b05faa6876fcee43997fb39d933b0afb9253b7f3e3b9d2c555034fc9b41af

    • memory/4500-0-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB

    • memory/4500-101-0x0000000000400000-0x000000000041A000-memory.dmp

      Filesize

      104KB