bdaf7482abc66b0a60fc53bfab527ec612e27e49e960c9fe2aa6d1a3afa4c140

Analysis

max time kernel
90s
max time network
127s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 20:12

Target

ae30e6799d5eea0d956d7cf164f97d50_NeikiAnalytics.exe
Size

130KB
MD5

ae30e6799d5eea0d956d7cf164f97d50
SHA1

5ebaa60e6e1907f70387cc0f9dccd9dc58e75cf4
SHA256

bdaf7482abc66b0a60fc53bfab527ec612e27e49e960c9fe2aa6d1a3afa4c140
SHA512

fe6ffccb959ab321bc2a21dbb5594fac317a6ae840a439cb98269f484b0d84ed7235a41f2605233b546a9b37587683d6e84d73adcfc3d4901a42c853f7a83ab1
SSDEEP

1536:eH1ZaQvR1KiX3NK6I+hZhYrt/w5Q6G6IpiRYzz9qJHhhnm0yG5aP/5UROXTmZ:SKQJcinxphkG5Q6GdpIOkJHhKRyOXK

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral1/memory/1760-0-0x0000000000400000-0x0000000000423000-memory.dmp	upx
behavioral1/memory/1760-333-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

ae30e6799d5eea0d956d7cf164f97d50_NeikiAnalytics.exe

pid process

1760 ae30e6799d5eea0d956d7cf164f97d50_NeikiAnalytics.exe

pid	process
1760	ae30e6799d5eea0d956d7cf164f97d50_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\ae30e6799d5eea0d956d7cf164f97d50_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\ae30e6799d5eea0d956d7cf164f97d50_NeikiAnalytics.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1760

memory/1760-0-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/1760-3-0x00000000003D0000-0x00000000003D1000-memory.dmp

Filesize
4KB

Download
memory/1760-11-0x00000000005C0000-0x00000000005C1000-memory.dmp

Filesize
4KB

Download
memory/1760-9-0x00000000005C0000-0x00000000005C1000-memory.dmp

Filesize
4KB

Download
memory/1760-21-0x00000000006C0000-0x00000000006C1000-memory.dmp

Filesize
4KB

Download
memory/1760-51-0x00000000007C0000-0x00000000007C1000-memory.dmp

Filesize
4KB

Download
memory/1760-41-0x0000000000780000-0x0000000000781000-memory.dmp

Filesize
4KB

Download
memory/1760-333-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download
memory/1760-332-0x0000000000416000-0x0000000000417000-memory.dmp

Filesize
4KB

Download