Analysis
-
max time kernel
145s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
12-05-2024 03:03
General
-
Target
60f3d0f64254ceef794db8034f5f2550_NeikiAnalytics.exe
-
Size
3.1MB
-
MD5
60f3d0f64254ceef794db8034f5f2550
-
SHA1
0aabad2f9b09447747e0f46bdbf74c8b35aaeb50
-
SHA256
f799ba874f6ee86001b59af01823a4caf374f0fc615ee4a5c8c65302a30292a8
-
SHA512
dcf092b866a4b7293b819a87f023670c2b35cf33fa126d7cb533f59e7bb4c3f22fae5f881a1438de3a655b8b56c80f0eb90626f1900a8e48c29574d8df99b234
-
SSDEEP
98304:+gwoXlECvdTlWgpsFl3XTQX/ezJa5zG4l2Gu:ht11agOFdcXMSzL2
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.126:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 16 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\60f3d0f64254ceef794db8034f5f2550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\60f3d0f64254ceef794db8034f5f2550_NeikiAnalytics.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.4MB
-
Filesize
3.8MB
-
Filesize
4KB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
3.8MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB
-
Filesize
11.4MB