97f83027d5bbe125c5bfe426cc3838e5d669a0d1171b23e8e9d167954a056bad

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
23/05/2024, 21:13

Target

8ae45918889cded4fd7893fcd46b3ad0_NeikiAnalytics.exe
Size

1.7MB
MD5

8ae45918889cded4fd7893fcd46b3ad0
SHA1

a158360da380b6c69fea07c927888ec50eb10743
SHA256

97f83027d5bbe125c5bfe426cc3838e5d669a0d1171b23e8e9d167954a056bad
SHA512

d7d7d932bb8b219f160d46e2e9f8d6c163002b6180aeefab7cc1951e3736d2552877aa95e0a4cbc959b5610b8f6ca81796097bff1494d7393ee644a5dd2478ef
SSDEEP

24576:q52vAqqs/PCZnT+7MZ7zPkg5p3nOpA9JXGPwD1HSLrAoOEjmOdoB2bzEJMbOOD:qQvVPkTT77kg5p+pAKIhSLrAmKOmB2uc

Score

7^/10

upx

UPX packed file 7 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/1792-0-0x0000000000400000-0x0000000000916000-memory.dmp	upx
behavioral1/memory/1792-2-0x0000000000400000-0x0000000000916000-memory.dmp	upx
behavioral1/memory/1792-5-0x0000000000400000-0x0000000000916000-memory.dmp	upx
behavioral1/memory/1792-4-0x0000000000400000-0x0000000000916000-memory.dmp	upx
behavioral1/memory/1792-3-0x0000000000400000-0x0000000000916000-memory.dmp	upx
behavioral1/memory/1792-1-0x0000000000400000-0x0000000000916000-memory.dmp	upx
behavioral1/memory/1792-7-0x0000000000400000-0x0000000000916000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1792	8ae45918889cded4fd7893fcd46b3ad0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\8ae45918889cded4fd7893fcd46b3ad0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\8ae45918889cded4fd7893fcd46b3ad0_NeikiAnalytics.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1792

memory/1792-0-0x0000000000400000-0x0000000000916000-memory.dmp

Filesize
5.1MB

Download
memory/1792-2-0x0000000000400000-0x0000000000916000-memory.dmp

Filesize
5.1MB

Download
memory/1792-5-0x0000000000400000-0x0000000000916000-memory.dmp

Filesize
5.1MB

Download
memory/1792-4-0x0000000000400000-0x0000000000916000-memory.dmp

Filesize
5.1MB

Download
memory/1792-3-0x0000000000400000-0x0000000000916000-memory.dmp

Filesize
5.1MB

Download
memory/1792-1-0x0000000000400000-0x0000000000916000-memory.dmp

Filesize
5.1MB

Download
memory/1792-6-0x00000000003E0000-0x00000000003E1000-memory.dmp

Filesize
4KB

Download
memory/1792-7-0x0000000000400000-0x0000000000916000-memory.dmp

Filesize
5.1MB

Download