Extracted

• • Target

    1ebe565a53c03f4bdc495d6941df54d0_NeikiAnalytics.exe

  • Size

    722KB

  • MD5

    1ebe565a53c03f4bdc495d6941df54d0

  • SHA1

    548ac8deefc8d727b6fdc8aa3ee7281610c9ca93

  • SHA256

    860fcff2ec1ba07bff7832f5ff0176b0e4cd99cbf42f1945d22e1450b8897f26

  • SHA512

    76aa2e26f8a8c7b0b4f9e49764615050392eb6a0b43046eb84715f9c1ea60d12895acad51d43e5cccb39ee5a0c457d8d7d77f171501c5059c920c0d8f13b69e6

  • SSDEEP

    12288:DquErHF6xC9D6DmR1J98w4oknqOKw/zTd1RVaHvymUi6rjXrm62iU952aLovi75F:arl6kD68JmloO7TdNaPymUi63i62xHLR

  Score

  10^/10

  azorultinfostealertrojanupx

  • Azorult

    An information stealer that was first discovered in 2016, targeting browsing history and passwords.

    trojaninfostealerazorult

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2