Extracted

• • Target

    57fe3f7352b6b08ae1c09a111016a030_NeikiAnalytics

  • Size

    2.2MB

  • MD5

    57fe3f7352b6b08ae1c09a111016a030

  • SHA1

    357d88087097d7b5c8ee84b94b22cadf6ef0a2b7

  • SHA256

    ae288431a67549905f8709430b9c16ee70ad9251086cf44e42efef7540af2ab4

  • SHA512

    a827484c68517efff80932dce0bb15d97b2a64e5e47fedecf1f2e919996385ec9d8e8fc89bab38b957262427d1ab184295098b64c436ad8d816aeb1a17833066

  • SSDEEP

    49152:Bp3e8i6/f6NgQvdLLFG8GCiEtimomTM922qNcwx:j3eoSNpQdoiJmTMhwcwx

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2