Behavioral task
behavioral1
Sample
435091cfa19f366279cfb437d02ac050_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
435091cfa19f366279cfb437d02ac050_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
435091cfa19f366279cfb437d02ac050_NeikiAnalytics.exe
-
Size
172KB
-
MD5
435091cfa19f366279cfb437d02ac050
-
SHA1
f6d2beb006dcb8e9031d675b8a38f9fffe6bbacd
-
SHA256
105f5ad45e2f72d11af7f791c34054c325aa7770ae0a115b36b2ae8a0ddbaca9
-
SHA512
897a79da309022ad3ced2756664f5f99af1dd2bb35a007ce64a563025df9a1a9d4317843fbfecaf1b8f9439aed46a12db71a646b620a30760ccab5c3b982af85
-
SSDEEP
3072:vC9wrcA6NlreW9xN/m0v9hGd75054hE8e8h8:vCA6XCWxfGd75054hE
Malware Config
Extracted
redline
hares
83.97.73.128:19071
-
auth_value
62fed2fd42b168e956200885cefb36a7
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 435091cfa19f366279cfb437d02ac050_NeikiAnalytics.exe
Files
-
435091cfa19f366279cfb437d02ac050_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ