Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
31-05-2024 00:31
Behavioral task
behavioral1
Sample
6f5511b8a196dfdeda27bc0508f6bc80_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6f5511b8a196dfdeda27bc0508f6bc80_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
6f5511b8a196dfdeda27bc0508f6bc80_NeikiAnalytics.exe
-
Size
30KB
-
MD5
6f5511b8a196dfdeda27bc0508f6bc80
-
SHA1
a9569badab62d525cea0a464b3b17b88eaa62d72
-
SHA256
432e5d36eb861ac23b6d17d6b968d74280c7c9f229ca98588026e086f1c6684c
-
SHA512
39e1a0335cbc4a28dbb575f2b0d7de37ee3d831047d3729fffea65ed15a84e6375dbce08b2f82b913e9693d6f5e15033c9256b5c39a1507cc7fee79762c3610d
-
SSDEEP
384:jaE1rXRO1Odnpk2XTRdHzrDrzVlp/TxFftzoaHKdpVwVjDcc/7FEf6Af9s7HtJBy:/rQMpk2XrrplzdHUwFtDbC9s7NJ7Xt
Malware Config
Extracted
smokeloader
pub1
Signatures
-
SmokeLoader
Modular backdoor trojan in use since 2014.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2856-0-0x0000000000400000-0x0000000000409000-memory.dmpFilesize
36KB