ecb2f0ea2da79f74bc2876f30a4c30e88023932f7c57983237304f8784bcb1de

Analysis

max time kernel
134s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05/06/2024, 06:48 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
Size

43KB
MD5

46a6f0ce2a3f33c739e7ca5ad7091280
SHA1

5884e665667411c48ad309aa174d3cee0bf7469c
SHA256

ecb2f0ea2da79f74bc2876f30a4c30e88023932f7c57983237304f8784bcb1de
SHA512

442533e0da1c78a9b17db1c3e7fc7c9cbc4db70f02dee8cf2bc2b01e6a3b21ddfe4ebda01aa6fa9987aa516e4d789157504980ff72a00974afee69115786e1a9
SSDEEP

768:kBT37CPKKIm0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9uAFQ3:CTWn1++PJHJXA/OsIZfzc3/Q8Q8/8SJM

Score

9^/10

ransomware upx

Malware Config

Signatures

Renames multiple (1672) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4412-0-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral2/files/0x0010000000023259-2.dat	upx
behavioral2/files/0x000400000001d8b2-6.dat	upx
behavioral2/memory/4412-306-0x0000000000400000-0x000000000040A000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\WindowsBase.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\cs\System.Windows.Forms.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\tr\System.Windows.Input.Manipulations.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\bin\ktab.exe.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.ko-kr.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.25\api-ms-win-core-heap-l1-1-0.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\System.Threading.AccessControl.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\it-IT\rtscom.dll.mui.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ja-JP\TipRes.dll.mui.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.25\System.IO.FileSystem.DriveInfo.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\server\jvm.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.fi-fi.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\i640.hash.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msadcor.dll.mui.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-environment-l1-1-0.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\cs\UIAutomationClientSideProviders.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-stdio-l1-1-0.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\System.Windows.Input.Manipulations.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.exe.sig.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-math-l1-1-0.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\msadc\msdfmap.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\System.Text.Encoding.CodePages.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\DirectWriteForwarder.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\it\System.Xaml.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\ja\WindowsFormsIntegration.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\fr\System.Windows.Forms.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\es.txt.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\uk-UA\tabskb.dll.mui.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\it\System.Windows.Forms.Primitives.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fr-FR\InkObj.dll.mui.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.25\System.Diagnostics.Tracing.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\zh-Hant\WindowsFormsIntegration.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\keypad\kor-kor.xml.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base.xml.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\base_rtl.xml.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.25\System.Net.Sockets.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\legal\javafx\icu_web.md.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\ecc.md.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-conio-l1-1-0.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\Microsoft.CSharp.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\es\System.Xaml.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\System.Windows.Forms.Primitives.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\de\System.Windows.Forms.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\ja\WindowsFormsIntegration.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\bci.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\vcruntime140.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcr120.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\de-DE\ShapeCollector.exe.mui.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fr-FR\TipTsf.dll.mui.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\ado\msado28.tlb.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.25\api-ms-win-core-util-l1-1-0.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\System.Threading.Thread.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\UIAutomationProvider.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\VSTO\vstoee.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\tr\UIAutomationTypes.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\pl\PresentationCore.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\PresentationFramework.Luna.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.25\ja\System.Windows.Controls.Ribbon.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.0\it\System.Windows.Input.Manipulations.resources.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\swidtag\Microsoft Windows Desktop Runtime - 6.0.25 (x64).swidtag.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\tr-TR\tipresx.dll.mui.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.0\System.Private.Xml.Linq.dll.tmp	46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\46a6f0ce2a3f33c739e7ca5ad7091280_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:4412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4116 --field-trial-handle=2292,i,2103142837140538807,15881446839139365070,262144 --variations-seed-version /prefetch:8
1⤵
PID:3448

Network

DNS

241.150.49.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.150.49.20.in-addr.arpa

IN PTR

Response
DNS

152.107.17.2.in-addr.arpa

Remote address:

8.8.8.8:53

Request

152.107.17.2.in-addr.arpa

IN PTR

Response

152.107.17.2.in-addr.arpa

IN PTR

a2-17-107-152deploystaticakamaitechnologiescom
DNS

20.160.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

20.160.190.20.in-addr.arpa

IN PTR

Response
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

104.219.191.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

104.219.191.52.in-addr.arpa

IN PTR

Response
DNS

183.142.211.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

183.142.211.20.in-addr.arpa

IN PTR

Response
DNS

97.17.167.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

97.17.167.52.in-addr.arpa

IN PTR

Response
DNS

86.23.85.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

86.23.85.13.in-addr.arpa

IN PTR

Response
DNS

198.187.3.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

198.187.3.20.in-addr.arpa

IN PTR

Response
DNS

56.94.73.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

56.94.73.104.in-addr.arpa

IN PTR

Response

56.94.73.104.in-addr.arpa

IN PTR

a104-73-94-56deploystaticakamaitechnologiescom
DNS

29.243.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

29.243.111.52.in-addr.arpa

IN PTR

Response
DNS

172.210.232.199.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.210.232.199.in-addr.arpa

IN PTR

Response
DNS

chromewebstore.googleapis.com

Remote address:

8.8.8.8:53

Request

chromewebstore.googleapis.com

IN A

Response

chromewebstore.googleapis.com

IN A

172.217.169.74

chromewebstore.googleapis.com

IN A

172.217.169.42

chromewebstore.googleapis.com

IN A

142.250.179.234

chromewebstore.googleapis.com

IN A

142.250.180.10

chromewebstore.googleapis.com

IN A

142.250.187.202

chromewebstore.googleapis.com

IN A

142.250.187.234

chromewebstore.googleapis.com

IN A

142.250.178.10

chromewebstore.googleapis.com

IN A

172.217.16.234

chromewebstore.googleapis.com

IN A

142.250.200.10

chromewebstore.googleapis.com

IN A

142.250.200.42

chromewebstore.googleapis.com

IN A

216.58.201.106

chromewebstore.googleapis.com

IN A

216.58.204.74
DNS

chromewebstore.googleapis.com

Remote address:

8.8.8.8:53

Request

chromewebstore.googleapis.com

IN Unknown

Response
DNS

74.169.217.172.in-addr.arpa

Remote address:

8.8.8.8:53

Request

74.169.217.172.in-addr.arpa

IN PTR

Response

74.169.217.172.in-addr.arpa

IN PTR

lhr48s09-in-f101e100net
DNS

171.117.168.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

171.117.168.52.in-addr.arpa

IN PTR

Response

96.16.110.114:80

260 B
5
13.107.253.64:443

46 B
40 B
1
1
172.217.169.74:443

chromewebstore.googleapis.com

tls

1.9kB
7.9kB
15
16

8.8.8.8:53

241.150.49.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

241.150.49.20.in-addr.arpa
8.8.8.8:53

152.107.17.2.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

152.107.17.2.in-addr.arpa
8.8.8.8:53

20.160.190.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

20.160.190.20.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

95.221.229.192.in-addr.arpa
8.8.8.8:53

104.219.191.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

104.219.191.52.in-addr.arpa
8.8.8.8:53

183.142.211.20.in-addr.arpa

dns

73 B
159 B
1
1

DNS Request

183.142.211.20.in-addr.arpa
8.8.8.8:53

97.17.167.52.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

97.17.167.52.in-addr.arpa
8.8.8.8:53

86.23.85.13.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

86.23.85.13.in-addr.arpa
8.8.8.8:53

198.187.3.20.in-addr.arpa

dns

71 B
157 B
1
1

DNS Request

198.187.3.20.in-addr.arpa
8.8.8.8:53

56.94.73.104.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

56.94.73.104.in-addr.arpa
8.8.8.8:53

29.243.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

29.243.111.52.in-addr.arpa
8.8.8.8:53

172.210.232.199.in-addr.arpa

dns

74 B
128 B
1
1

DNS Request

172.210.232.199.in-addr.arpa
8.8.8.8:53

chromewebstore.googleapis.com

dns

75 B
267 B
1
1

DNS Request

chromewebstore.googleapis.com

DNS Response

172.217.169.74

172.217.169.42

142.250.179.234

142.250.180.10

142.250.187.202

142.250.187.234

142.250.178.10

172.217.16.234

142.250.200.10

142.250.200.42

216.58.201.106

216.58.204.74
8.8.8.8:53

chromewebstore.googleapis.com

dns

75 B
132 B
1
1

DNS Request

chromewebstore.googleapis.com
8.8.8.8:53

74.169.217.172.in-addr.arpa

dns

73 B
112 B
1
1

DNS Request

74.169.217.172.in-addr.arpa
8.8.8.8:53

171.117.168.52.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

171.117.168.52.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3808065738-1666277613-1125846146-1000\desktop.ini.tmp

Filesize
43KB

MD5
dd9554e4249689e37790813f0c4231bf

SHA1
5a6b682a86d8d3a07e90fb8b1acf58a60b3b1ab9

SHA256
ecb721c745898449f5b7a42da161beec06c475824ec005c59ce0e7aec255ab51

SHA512
c750068a6376c8b21bbdce581707afa57fee2b3316223b894d2b8d1d50eb0a7b9e784475eee9ed34cb8c777cd91241bf9d0d88f9565c575d2ad823af10acd931

Download Submit
C:\libsmartscreen.dll.tmp

Filesize
43KB

MD5
59639d93bcb0afcb8f1f55489c7b52fb

SHA1
85db29f4728cf7305fe955a55bcc872f27208dcb

SHA256
8cbaa4787229e5735af6a31f4bd29d09d33cad18f69cd9b32e18ec6a3fcde9f6

SHA512
b70e5d5fb03875552a422b000b1d30a1f6f27d907689b31a9e7cf934489ce0c124c443918df7280d9dd3c23103c5dc6c8e9fc110acb1736854a437629ff0056c

Download Submit
memory/4412-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/4412-306-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.