0425049e15d1751cd51cf71539e45279b4d15f5ccd142753d1bba135b9ab76b9

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
17/05/2024, 02:50

Target

8fa0b19dd5fa2617ae5f7010c9f4b0c0_NeikiAnalytics.exe
Size

99KB
MD5

8fa0b19dd5fa2617ae5f7010c9f4b0c0
SHA1

dce552b2d3222eac0a5ed631d0707f5f07e831e2
SHA256

0425049e15d1751cd51cf71539e45279b4d15f5ccd142753d1bba135b9ab76b9
SHA512

071ae47282826929fea5308ee91eb729c54d75a49ff113448fc364eabe4bee3e24b009294842a24ba13378daa02797e7013439dccb4dcd42ed942cb6620c49b2
SSDEEP

768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAyC:CzqsQ5PIt4+/yfeB6r6YcOik5h36lt

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1904-0-0x0000000000400000-0x000000000041B000-memory.dmp	upx
behavioral1/files/0x00070000000149ea-5.dat	upx
behavioral1/memory/1904-101-0x0000000000400000-0x000000000041B000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\8fa0b19dd5fa2617ae5f7010c9f4b0c0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\8fa0b19dd5fa2617ae5f7010c9f4b0c0_NeikiAnalytics.exe"
1⤵
PID:1904

C:\My Downloads\Combat Flight Simulator 3 ISO - Full Downloader.exe

Filesize
99KB

MD5
1c0eab6f359f30d3498e2f237fc99905

SHA1
d3aa5af45d3150eb5b8431ae2c6a561ef3233ac7

SHA256
ed1ae48d49e4fa62a5f9154c4df354ca7f9300a0c8e5ba0edfe3bcbbfefa7093

SHA512
27a28efae4f63bee94f27350623a1f2d70a0396179ab6f4eefb37cb02779a3e19a6a988af1dbe33beca4cf79ebe2634819f2851cced6bf0aded378f517ec7f8e

Download Submit
memory/1904-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/1904-101-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download