General
-
Target
6823de7208633c27fbfdb5f0370a9350_NeikiAnalytics.exe
-
Size
951KB
-
Sample
240602-zz9twagc39
-
MD5
6823de7208633c27fbfdb5f0370a9350
-
SHA1
32becbbfed5f1ab6807d7143c7c6c4bd901915fe
-
SHA256
ba288b3054435c49d92fce233b23c6ba12fbe01bfb71924c9d30c25f6c027223
-
SHA512
1b9fc4007a640465970dc286eacfe5e575c8be162a52114c43950006b806fb51dc9b058fc358d9c248eab1cce985a1892d0164d800d4ec4a15f5007421a42982
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5g:Rh+ZkldDPK8YaKjg
Static task
static1
Behavioral task
behavioral1
Sample
6823de7208633c27fbfdb5f0370a9350_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6823de7208633c27fbfdb5f0370a9350_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
6823de7208633c27fbfdb5f0370a9350_NeikiAnalytics.exe
-
Size
951KB
-
MD5
6823de7208633c27fbfdb5f0370a9350
-
SHA1
32becbbfed5f1ab6807d7143c7c6c4bd901915fe
-
SHA256
ba288b3054435c49d92fce233b23c6ba12fbe01bfb71924c9d30c25f6c027223
-
SHA512
1b9fc4007a640465970dc286eacfe5e575c8be162a52114c43950006b806fb51dc9b058fc358d9c248eab1cce985a1892d0164d800d4ec4a15f5007421a42982
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5g:Rh+ZkldDPK8YaKjg
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-