Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
16/05/2024, 11:27
General
-
Target
dc9c53928c7af074aaeb934468c16090_NeikiAnalytics.exe
-
Size
4.1MB
-
MD5
dc9c53928c7af074aaeb934468c16090
-
SHA1
cea012f50e7c4ac10db542315dccb9c8ff475bca
-
SHA256
ff3250c9d29b3ad5edf4bf057722cf31add45149ba11c1b2ada3311a0ccc3c65
-
SHA512
73c6db83b2f964b7fcc6295484f0f2a4e0540261b4aae9462944d2516d1a868b35524bce60ec466e36aa88946060c19cade931e0cba9f6b7afe16c6f942972e3
-
SSDEEP
98304:IMi5XVbaSoP0nn92GKBGloZzP4CjVUqkCDgteLHWmp38ua:H6XZaSoP//4CRUqkCDgsHW8a
Score
10/10
Malware Config
Signatures
-
Glupteba
Glupteba is a modular loader written in Golang with various components.
-
Glupteba payload 4 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc9c53928c7af074aaeb934468c16090_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\dc9c53928c7af074aaeb934468c16090_NeikiAnalytics.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2332 -s 2602⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2332 -ip 23321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.0MB
-
Filesize
8.9MB
-
Filesize
42.9MB
-
Filesize
9.1MB
-
Filesize
8.9MB