General
-
Target
bc65a87e3976bc951b18372e672d87b0_NeikiAnalytics.exe
-
Size
903KB
-
Sample
240518-n1j43aab88
-
MD5
bc65a87e3976bc951b18372e672d87b0
-
SHA1
13c7da56a457bc244a0d2890d6c2d3bf5cc1ee63
-
SHA256
d253a0c797d60d36b307b1cbe7b9d2379f54973ba9fb74179b7089a943863eec
-
SHA512
b15fc9b12d838dfc54d58e50544ec4731ef25746dc985fed63577d64e365d338a1c7818e5bb83a4efaee80e5d3b9963f2efc97eef54e6c52bfc0828d2639697e
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa54:gh+ZkldoPK8YaKG4
Static task
static1
Behavioral task
behavioral1
Sample
bc65a87e3976bc951b18372e672d87b0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bc65a87e3976bc951b18372e672d87b0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
bc65a87e3976bc951b18372e672d87b0_NeikiAnalytics.exe
-
Size
903KB
-
MD5
bc65a87e3976bc951b18372e672d87b0
-
SHA1
13c7da56a457bc244a0d2890d6c2d3bf5cc1ee63
-
SHA256
d253a0c797d60d36b307b1cbe7b9d2379f54973ba9fb74179b7089a943863eec
-
SHA512
b15fc9b12d838dfc54d58e50544ec4731ef25746dc985fed63577d64e365d338a1c7818e5bb83a4efaee80e5d3b9963f2efc97eef54e6c52bfc0828d2639697e
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa54:gh+ZkldoPK8YaKG4
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-