General

  • Target

    aaae00a42ec58710b643016d90763420_NeikiAnalytics.exe

  • Size

    4.3MB

  • Sample

    240519-j6yr7aac25

  • MD5

    aaae00a42ec58710b643016d90763420

  • SHA1

    d3c265adf601e8a8b20c6530479db23a719a85af

  • SHA256

    9d4317ef01dd70befdfd299b7b9ec9e7d9fb77b2d5b784aef5faa77da3653541

  • SHA512

    7bd607b8468d5ae556895dc8d7969f5ac2bd4b6c48d0e37c6757cf576cb1912077e050e4c9bd1097e178528142e6ad5308a54b6f3860843370580696308171bc

  • SSDEEP

    98304:lqs7WQUP+Mxzy8RjJ+6qKgv9dAdw+EKnU3pO9utb:wsCQy+N8RjJUKO9dagRZOC

Score
7/10

Malware Config

Targets

    • Target

      aaae00a42ec58710b643016d90763420_NeikiAnalytics.exe

    • Size

      4.3MB

    • MD5

      aaae00a42ec58710b643016d90763420

    • SHA1

      d3c265adf601e8a8b20c6530479db23a719a85af

    • SHA256

      9d4317ef01dd70befdfd299b7b9ec9e7d9fb77b2d5b784aef5faa77da3653541

    • SHA512

      7bd607b8468d5ae556895dc8d7969f5ac2bd4b6c48d0e37c6757cf576cb1912077e050e4c9bd1097e178528142e6ad5308a54b6f3860843370580696308171bc

    • SSDEEP

      98304:lqs7WQUP+Mxzy8RjJ+6qKgv9dAdw+EKnU3pO9utb:wsCQy+N8RjJUKO9dagRZOC

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks