General
- Target 63d74b4d5b18373ba3230ed473922c70_NeikiAnalytics
- Size 1.1MB
- Sample240512-d28hyaed5y
- SHA256 328e70cca6f607ee5e124be316cbd024fa84f61b874c0568366516a8222675aa
- MD5 63d74b4d5b18373ba3230ed473922c70
- SHA1 96dd293df1e4d4f7972d3c2d647195b81a1699d8
- SHA512 c43d222acef5f5581ad1923431aa66a39161da2e69a02afc64aeb901e3c7465c392d11bad5d14662b66f79e90adc3ef843e78887591a4794486350aa0ba6f512
- SSDEEP 24576:0qDEvCTbMWu7rQYlBQcBiT6rprG8amzNiCDJjKJ7ypNh1:0TvC/MTQYxsWR7amgUJI2
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
63d74b4d5b18373ba3230ed473922c70_NeikiAnalytics.exe
Resource
win7-20240419-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
63d74b4d5b18373ba3230ed473922c70_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 63d74b4d5b18373ba3230ed473922c70_NeikiAnalytics
- Size 1.1MB
- SHA256 328e70cca6f607ee5e124be316cbd024fa84f61b874c0568366516a8222675aa
- MD5 63d74b4d5b18373ba3230ed473922c70
- SHA1 96dd293df1e4d4f7972d3c2d647195b81a1699d8
- SHA512 c43d222acef5f5581ad1923431aa66a39161da2e69a02afc64aeb901e3c7465c392d11bad5d14662b66f79e90adc3ef843e78887591a4794486350aa0ba6f512
- SSDEEP 24576:0qDEvCTbMWu7rQYlBQcBiT6rprG8amzNiCDJjKJ7ypNh1:0TvC/MTQYxsWR7amgUJI2
- MD5 SHA1 SHA512 SSDEEP
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Detect ZGRat V1
-
Adds Run key to start application
-
Suspicious use of SetThreadContext