a187dbfd41d36e8573115de3b2e25fe7d746fdb27cf377183bbc5a35cc319d2e

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
13/05/2024, 09:48

Target

afccde12595fd782114d7d5ea2915ad0_NeikiAnalytics.exe
Size

1.3MB
MD5

afccde12595fd782114d7d5ea2915ad0
SHA1

23052732565c7c7c7adfb88fcb965bdbf79774c2
SHA256

a187dbfd41d36e8573115de3b2e25fe7d746fdb27cf377183bbc5a35cc319d2e
SHA512

621e529dc178151b269b86f995dcd6675a252e3b95173ec5a8c64135bd0eefb48629f0e35862098d597d95ae6857876cad93ef20619af4ac3ab89e5a9315b5d1
SSDEEP

24576:R00eKKrdU0FLjpbTOTzspWYQbeO7NZeA5TY0QS:RT/sd3FLtTQsplDsnPQS

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2340-0-0x0000000000400000-0x0000000000823000-memory.dmp	upx
behavioral1/memory/2340-3-0x0000000000400000-0x0000000000823000-memory.dmp	upx
behavioral1/memory/2340-4-0x0000000000400000-0x0000000000823000-memory.dmp	upx

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2340	afccde12595fd782114d7d5ea2915ad0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\afccde12595fd782114d7d5ea2915ad0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\afccde12595fd782114d7d5ea2915ad0_NeikiAnalytics.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2340

memory/2340-0-0x0000000000400000-0x0000000000823000-memory.dmp

Filesize
4.1MB

Download
memory/2340-1-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download
memory/2340-2-0x00000000004C9000-0x00000000004CA000-memory.dmp

Filesize
4KB

Download
memory/2340-3-0x0000000000400000-0x0000000000823000-memory.dmp

Filesize
4.1MB

Download
memory/2340-4-0x0000000000400000-0x0000000000823000-memory.dmp

Filesize
4.1MB

Download
memory/2340-5-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download