f5d6ee4f7962120109d70965d98ee97c2f0bdd713cd84a61b552c669f5630248

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02/06/2024, 22:33

Target
77a6580b4230b9aee8ad2dd3c1a4dc00_NeikiAnalytics.exe
Size 29KB
Sample240602-2g155aaf35
SHA256 f5d6ee4f7962120109d70965d98ee97c2f0bdd713cd84a61b552c669f5630248
MD5 77a6580b4230b9aee8ad2dd3c1a4dc00
SHA1 a4302c9e6af73f7de6a9bce6535eef33ddd2b83b
SHA512 f43aeed157ab74c5dac9ce6b01ef37c49fa94f3a3319a5fbe3e70eb139b84ab646c7c3cbb434307fea912190686a0112b59ddc81acc90840f232b70376324a10
SSDEEP 768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCik5dAy7b6lSy:IHzzeWHXbJGB2EOik5h36l1
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2960-0-0x0000000000400000-0x000000000041A000-memory.dmp	upx
behavioral1/files/0x0008000000015d6b-5.dat	upx
behavioral1/memory/2960-101-0x0000000000400000-0x000000000041A000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\77a6580b4230b9aee8ad2dd3c1a4dc00_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\77a6580b4230b9aee8ad2dd3c1a4dc00_NeikiAnalytics.exe"
1⤵
PID:2960

Half-life WON Full Downloader.exe

Path C:\My Downloads\Half-life WON Full Downloader.exe
Size 29KB
SHA256 52eb504381867f0f7332e3429970506a5a95f702f69cb3901ef7d46c9ff3960d
MD5 34ed1cafc9931d4ef585eb248dde85e3
SHA1 892f3e95390d2cbd849dfb2879cbdd9a660c16a9
SHA512 f145a6cc972d2512be98e05f32498acc02f6212bb4c2f0b317c437c78ccd49948e2b424576aaa7f60f7bc4cb44ded298454ecf426e2bfa9b682f9d82a75be552
SSDEEP 768:ITRfpN0pOy3OzeXmOGXbJOlB2vsLCik5dAy7b6lSN:IHzzeWHXbJGB2EOik5h36lG
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2960-0-0x0000000000400000-0x000000000041A000-memory.dmp

Download

memory/2960-101-0x0000000000400000-0x000000000041A000-memory.dmp

Download