Analysis
-
max time kernel
149s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
22-05-2024 22:47
General
-
Target
5005fdcc8839528f72d5a2914dcaa280_NeikiAnalytics.exe
-
Size
126KB
-
MD5
5005fdcc8839528f72d5a2914dcaa280
-
SHA1
e11a6282de0c0ca3a742683daf7d32545ae8d309
-
SHA256
e4c04592c8faf20732c6779618217eed8e4a4399bb3a92e95ed21793e79787fc
-
SHA512
668fdc747aeca0399646dd77df1b18202cdb28e5b909108ad060466b49e8fc1dcf85a7b1dab704cb63991c223cb0c830a0c30dbfd9393210b0ffcce93d474b8e
-
SSDEEP
3072:G6NjvPX6SlNqvJ699+h8eoMovPqZfP4e3bVzXVK:G4j6I+oMovPsdbZXV
Score
10/10
Malware Config
Signatures
-
Detects XenoRAT malware 1 IoCs
XenoRAT is an open-source remote access tool (RAT) developed in C#.
-
XenorRat
XenorRat is a remote access trojan written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5005fdcc8839528f72d5a2914dcaa280_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5005fdcc8839528f72d5a2914dcaa280_NeikiAnalytics.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
152KB
-
Filesize
6.9MB
-
Filesize
6.9MB