Extracted

• • Target

    02ee31d0891af2f82731fdad32078da0_NeikiAnalytics.exe

  • Size

    2.1MB

  • MD5

    02ee31d0891af2f82731fdad32078da0

  • SHA1

    2dd1a1f539d4d4af793e660d9afe480820991ea2

  • SHA256

    1d81c7cd634ad75ce6367c12f2c320c0b25494ea0dd204dfbcca007ca50c9fbe

  • SHA512

    bb7fa0a65983eb6378bf0deea25f7f4d77fffc81a8a53669fb0556424ec6762d4cf23bc31281f4fa2e888d4d3000c969d3df91735705308ae3246980898bffd3

  • SSDEEP

    49152:Jb9PSA4trv2C98axMwdUC73S7dPctnRNQfTEbcmiJTKi:9pS52edZV7DjqnFlr

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2