Analysis
-
max time kernel
141s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-05-2024 04:02
Behavioral task
behavioral1
Sample
a2496010abd6903b4c237c211b6b7e50_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2496010abd6903b4c237c211b6b7e50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
a2496010abd6903b4c237c211b6b7e50_NeikiAnalytics.exe
-
Size
83KB
-
MD5
a2496010abd6903b4c237c211b6b7e50
-
SHA1
8aff9f961f79f4dcf9d096948a4a6f3a180f3652
-
SHA256
3b0e36fd0214cf926918ad82fec97868ca187e9d58d54f69bec9c128526c1c7f
-
SHA512
4c094de4306defd35580195eccad11705e147cfb59ff1461141de3ed115b879d3ea111d548cfb18b91fe87a7e341f95e6ebeea5e94918c1fe4c81886a09ef636
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+AK:LJ0TAz6Mte4A+aaZx8EnCGVuA
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2872-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2872-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2872-5-0x0000000000400000-0x000000000042A000-memory.dmp upx C:\Users\Admin\AppData\Local\Temp\rifaien2-lF7ZWWFSmPdflb8m.exe upx behavioral1/memory/2872-14-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2872-20-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2872-27-0x0000000000400000-0x000000000042A000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\rifaien2-lF7ZWWFSmPdflb8m.exeFilesize
83KB
MD5d86e0cc1f82949a9467633b6e17ff8f1
SHA1ef77845e795aa48a008e3fe35ae7a0df0ad96d74
SHA2563eadaaadf9b6660baa7d9d0612495d4b2162bdf8bd425d1aa7845ccdd12e9b04
SHA5129e8f61dc4954c127a17e703b7c5c54690319048b9809b89622e3e664ccd02de3a50eee1a08d9dcb6984e8d29ddd6e6a371ef437e33efe278df71dbc0b569075f
-
memory/2872-0-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2872-1-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2872-5-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2872-14-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2872-20-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2872-27-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB