Overview

overview

7

Static

static

7

41e30d6936...cs.exe

windows7-x64

7

41e30d6936...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/05/2024, 22:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    41e30d6936b7dd8064de6fbe64f72730_NeikiAnalytics.exe

  • Size

    29KB

  • MD5

    41e30d6936b7dd8064de6fbe64f72730

  • SHA1

    1e986a7dadc102020d130e934875a98a93aad3d0

  • SHA256

    a105e4a6f0177b7a90ecfb08cba18a9eba4437966e75df81040ba6833d6c0bde

  • SHA512

    98dccfea19c3ae239037ab4594d27032bf0267fe9e82621aecb5e705f3b76a563f23c63f9dc8a359584cc1059d3f855d8f2be939d7c04ca8562776ab0b7065ac

  • SSDEEP

    768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCik5dAy7b6lSO:IHzzeWHXbJGB2EOik5h36lJ

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\41e30d6936b7dd8064de6fbe64f72730_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\41e30d6936b7dd8064de6fbe64f72730_NeikiAnalytics.exe"
    1⤵
      PID:4448

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\My Downloads\Empire Earth Full Downloader.exe
            Filesize

            29KB

            MD5

            1344c016ed56dc41ecddc1326503cccc

            SHA1

            171c330be3415a51b3ee64621974a92c09951f24

            SHA256

            3793a7e1f1c813773f3096001515780eacc51e6fe17ba84236daf9afe6525ba0

            SHA512

            80e2bdaa82a3c9366f147977e761471a2b09881294e2efa912c367cd9e95d2553678b015553dd35c85ecc31aea4dfa079b5a8789f83e6853c238ec6391632bc0

            Download Submit

          • memory/4448-0-0x0000000000400000-0x000000000041A000-memory.dmp

            Filesize

            104KB

            Download

          • memory/4448-101-0x0000000000400000-0x000000000041A000-memory.dmp

            Filesize

            104KB

            Download