General
- Target cff5c70a05d8c31cbbe5b672b0bff870_NeikiAnalytics
- Size 1.3MB
- Sample240510-nfa1naef89
- SHA256 6fcadc10d94ebbafb62fd909da84fc8bd4d097e05d2c8ffe111dae982037a950
- MD5 cff5c70a05d8c31cbbe5b672b0bff870
- SHA1 94f728622f8eabceccc8b1f013cf20998f070782
- SHA512 217c235c2baf1611b38cbbb876582ae685ed57509c863cb4dab9efd1ac6ad92d5656bd2749da2df4de10ce52aed72428716ca2537d866fd9f432183012bf12b6
- SSDEEP 24576:9AHnh+eWsN3skA4RV1Hom2KXMmHao2MB5X7MZxOtd5:ch+ZkldoPK8Yao55
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
cff5c70a05d8c31cbbe5b672b0bff870_NeikiAnalytics.exe
Resource
win7-20240508-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target cff5c70a05d8c31cbbe5b672b0bff870_NeikiAnalytics
- Size 1.3MB
- SHA256 6fcadc10d94ebbafb62fd909da84fc8bd4d097e05d2c8ffe111dae982037a950
- MD5 cff5c70a05d8c31cbbe5b672b0bff870
- SHA1 94f728622f8eabceccc8b1f013cf20998f070782
- SHA512 217c235c2baf1611b38cbbb876582ae685ed57509c863cb4dab9efd1ac6ad92d5656bd2749da2df4de10ce52aed72428716ca2537d866fd9f432183012bf12b6
- SSDEEP 24576:9AHnh+eWsN3skA4RV1Hom2KXMmHao2MB5X7MZxOtd5:ch+ZkldoPK8Yao55
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Detect ZGRat V1
-
Suspicious use of SetThreadContext