Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18-05-2024 21:41
Static task
static1
Behavioral task
behavioral1
Sample
09079f41195ba703fafc1b98c4a75d20_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09079f41195ba703fafc1b98c4a75d20_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
09079f41195ba703fafc1b98c4a75d20_NeikiAnalytics.exe
-
Size
1.9MB
-
MD5
09079f41195ba703fafc1b98c4a75d20
-
SHA1
bb0860875d9287eb09be0572758d0eb6cc9e6e59
-
SHA256
5b925a3e49859a29b99b17b1230739411be0f292a98e69c8255a5f880f01e8b3
-
SHA512
d22b23a651b39a51dd57984f94254c3d41a85b7c3a714b155e4aaf29ec426465a940ea6383bd8691b175b53f76aff3fbdb2d2caf18747052d3f74c3c795a6dcf
-
SSDEEP
49152:E1iWwV9wxTekJtk5/IjTf5GelUXKerOmhitS:EAvodjJtk/eldS
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2892-1-0x0000000001F50000-0x000000000300A000-memory.dmp upx behavioral1/memory/2892-3-0x0000000001F50000-0x000000000300A000-memory.dmp upx