Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 22:17

General

  • Target

    4a5bde268d3bd5e1a416d4abc108b5e0_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    4a5bde268d3bd5e1a416d4abc108b5e0

  • SHA1

    80d69985b2e4892e8b5ea628b9c88fc70883d608

  • SHA256

    4b8d4e7b486441ce81ba805409ca8fae91259400d3037c1d6defe98dbbd741a4

  • SHA512

    210bc38e614c5f8a04f231801927ad33a78602b205a3b6bf15962086dde41912d7c558c07141909c618a8aef9753467d76525c2c95a0bd137e8ffed3e4e0e7fd

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+kK:LJ0TAz6Mte4A+aaZx8EnCGVuk

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\4a5bde268d3bd5e1a416d4abc108b5e0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4a5bde268d3bd5e1a416d4abc108b5e0_NeikiAnalytics.exe"
    1⤵
      PID:2328

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-SWR9s7ipCw6OukW3.exe

            Filesize

            83KB

            MD5

            15308a1d57b36de89545a9b98195d2cd

            SHA1

            bb9937750905870d613d24c21147f711cdc2c29c

            SHA256

            339540cd9bdf53c0757b994424782c0ed32f6b5f1d09f6838ddbf95187e26947

            SHA512

            9c38356fbee4874b6b32cb10193edc569daf7115e1f63984bbc1170c62da76d344d788eaa51d6bdad1a4f7f4f208c486b942953bf7acafd7c696d4b435c6342e

          • memory/2328-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2328-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2328-7-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2328-14-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2328-21-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/2328-28-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB