Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    07/06/2024, 11:52

General

  • Target

    55174dccf208769f04d9644ef38de7b0_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    55174dccf208769f04d9644ef38de7b0

  • SHA1

    ce34e6438b449a92a26ac6e6d18da96a308198f3

  • SHA256

    f093d486acefdb5554d25613739b4269b921eee86ea858a4d31eb649e016728b

  • SHA512

    6655c1c20f8152ab85b1348b93c931ee38ca03adbda0f63e29e5d5bd87da7a19bcb1dd365df892d04f64816c58d81bf85a1c42008476bbc8f63292c484f83ada

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+PK:LJ0TAz6Mte4A+aaZx8EnCGVuP

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\55174dccf208769f04d9644ef38de7b0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\55174dccf208769f04d9644ef38de7b0_NeikiAnalytics.exe"
    1⤵
      PID:1008

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-gfTtLwMW7Ow8vKuq.exe

            Filesize

            83KB

            MD5

            ab2a5954cbba8e1cb155980def3a96a1

            SHA1

            b857430edbd1cba3bc8e2e4b3f9086a237d5e08d

            SHA256

            7111b35e3b7fbdfcb16c890539be22d72e906fbc27b49b0d733c9faa919e770e

            SHA512

            a850a858e113bca1a065b60163ec8e9bd6b1dcd3befa73da4964915102b5c3788c0d6d769a61e869d5e6240325f8dbf7756a590079841ff8ca7f65bcb2f86c26

          • memory/1008-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1008-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1008-7-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1008-14-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1008-21-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

          • memory/1008-28-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB