Overview

overview

7

Static

static

7

5d912bfa9f...cs.exe

windows7-x64

7

5d912bfa9f...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 20:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    5d912bfa9fdc460d45031bda3da9bcd0_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    5d912bfa9fdc460d45031bda3da9bcd0

  • SHA1

    40d9a644b346473ddf44d1ebadda40c00d76503a

  • SHA256

    fbc29c30448487496e913dcdd2d61be9edc88a1f9cb66f653ecea66377c358da

  • SHA512

    ab9b4e3645c1a13d77313fa9c4bf7df15f6afca0d5e9eeb97fcc089f5057ba70f55722c8c7c5828bfa2ce5e4836a76c9f7d629996b7e9fa818f2041ab3b18056

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+6K:LJ0TAz6Mte4A+aaZx8EnCGVu6

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\5d912bfa9fdc460d45031bda3da9bcd0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\5d912bfa9fdc460d45031bda3da9bcd0_NeikiAnalytics.exe"
    1⤵
      PID:1788

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-4Jc6CjINTCOawsIn.exe
            Filesize

            83KB

            MD5

            bb755e095e29ba2f80b1680babbcc3d3

            SHA1

            a652eebe2acdf8f051c9485f45dcf2b6e6885856

            SHA256

            7a3f6763cf594baff21656a359b1287cbf875fffa038a47b22e740b4960fc9df

            SHA512

            e0c253e05e600e4e91051f6e71741a1f6a4d2dc3b7bc39dc2d08f480f36231fb924b822afff7224fadc853a834859db98c52c66d84aa00312db49c11570e4143

            Download Submit

          • memory/1788-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/1788-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/1788-7-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/1788-14-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/1788-21-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/1788-28-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download