Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 00:22
Behavioral task
behavioral1
Sample
611a6440ba53518a76869cf603af82e0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
611a6440ba53518a76869cf603af82e0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
611a6440ba53518a76869cf603af82e0_NeikiAnalytics.exe
-
Size
83KB
-
MD5
611a6440ba53518a76869cf603af82e0
-
SHA1
c3f0b6ca2f3a76c56404acb185b411997b6e612e
-
SHA256
9592c30369259e306d832ac333f4ebcc26e5fea41b37fa304ddccf76295873c7
-
SHA512
0f57ba018487d0ba86e57272331cadec742e99e73b158664db64fcaa4beb25939a7b65037a5ffcc6c42ea83ebb41c7da52af8bac63e93d956d66da34769a52fd
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+fK:LJ0TAz6Mte4A+aaZx8EnCGVuf
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2992-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2992-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2992-7-0x0000000000400000-0x000000000042A000-memory.dmp upx C:\Users\Admin\AppData\Local\Temp\rifaien2-tB3n5qcuMdGklMxC.exe upx behavioral1/memory/2992-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2992-21-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2992-28-0x0000000000400000-0x000000000042A000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\rifaien2-tB3n5qcuMdGklMxC.exeFilesize
83KB
MD5821f6455b0ec76fde7c0b6c611d1c398
SHA1f895a022af416fc39dd207f8973436c2337b0fe4
SHA2561b3e2d635da3ad72e554a942fcb0348f2ed7ec95c741ec2cb950a92a2465b344
SHA51275a15542fc45adaab2b6c04619cb26f308448d606add4b38704904734f77a83a46b96bb84eee343e7fffb4ea182f2aa6e22325f99cac8c0646a83b975dd1b575
-
memory/2992-0-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2992-1-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2992-7-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2992-14-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2992-21-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2992-28-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB