Overview

overview

7

Static

static

7

36685efcf3...cs.exe

windows7-x64

7

36685efcf3...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36685efcf34c7a7a6f6dd2e48199e4700b5ab8fe3945a50297703dd8daced74f_NeikiAnalytics

  • Size

    900KB

  • Sample

    240521-mhzlcsac2v

  • MD5

    4b29ffb60c0e5f5e9bfecff0061cfa6b

  • SHA1

    badd38b886077e082a3fbe025c1e7d0f177de7f4

  • SHA256

    36685efcf34c7a7a6f6dd2e48199e4700b5ab8fe3945a50297703dd8daced74f

  • SHA512

    35eee9f167174e8a2816a2a90e690c9aa8dee7ca9df33c85f957495473dbaecc1d96ea18f17ca75ab2da7f6ed15167d91552ffed4793fdd1fd14d244857f448c

  • SSDEEP

    24576:cdBS2pWPPcyfi7dlXhgWs+2iMllfi706uZS/2IsH:sB/p2+2PC/2IsH

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      36685efcf34c7a7a6f6dd2e48199e4700b5ab8fe3945a50297703dd8daced74f_NeikiAnalytics

    • Size

      900KB

    • MD5

      4b29ffb60c0e5f5e9bfecff0061cfa6b

    • SHA1

      badd38b886077e082a3fbe025c1e7d0f177de7f4

    • SHA256

      36685efcf34c7a7a6f6dd2e48199e4700b5ab8fe3945a50297703dd8daced74f

    • SHA512

      35eee9f167174e8a2816a2a90e690c9aa8dee7ca9df33c85f957495473dbaecc1d96ea18f17ca75ab2da7f6ed15167d91552ffed4793fdd1fd14d244857f448c

    • SSDEEP

      24576:cdBS2pWPPcyfi7dlXhgWs+2iMllfi706uZS/2IsH:sB/p2+2PC/2IsH

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks