Extracted

• • Target

    0ec29fda908023de0425cf5c26740400_NeikiAnalytics.exe

  • Size

    2.1MB

  • MD5

    0ec29fda908023de0425cf5c26740400

  • SHA1

    7a2ded3432327a63ece52bb4306cfafc6abcf56f

  • SHA256

    907a9ee79560c668bd2fd954cea2011e8e0b58d2c069497673e2e0411e54d07e

  • SHA512

    025582d098adb37bf65d423e68f55d164ba42b7ed4c57d9bbb1509d20e141f44f969711b6b1b510bbb6bbe42b7a8abac3bfb20849d85ddd895df923eac77ccf0

  • SSDEEP

    49152:O6vMDLVkCxOhIgTYj6ZWg4mbhvFfed4V2HATcwgUj:O4MD6oOl0j6ZGmbhvFfeCV2HL0

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2