Overview

overview

7

Static

static

7

d32b8a922e...cs.exe

windows7-x64

7

d32b8a922e...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    07/06/2024, 13:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    d32b8a922e439d2db57adc8af88b71b0_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    d32b8a922e439d2db57adc8af88b71b0

  • SHA1

    c2b696ebe6dc28d36720989905e9de90da142fb7

  • SHA256

    59cabe77497ada3367c3ab90d6bd52ca31404d94ee8da35c98897ea084e0e3a9

  • SHA512

    7fa6bba2bdef1b9ea7fad8929d96835661880460d9af7264498ff16d81c097d1fb2983bb2dc7313ed5e7d9d9f3bde9e5dc49b9f070ab88e2d66881ccba985587

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+TK:LJ0TAz6Mte4A+aaZx8EnCGVuT

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\d32b8a922e439d2db57adc8af88b71b0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\d32b8a922e439d2db57adc8af88b71b0_NeikiAnalytics.exe"
    1⤵
      PID:848

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Users\Admin\AppData\Local\Temp\rifaien2-T9sZgv6jX2XNzjcd.exe
            Filesize

            83KB

            MD5

            ab3f6c531392f11fc862d8eb989ee951

            SHA1

            774086457b80887550b47d73be504487b176bfc5

            SHA256

            9e3c94bc0b7a73873a84b7763d1691c020f030cb458376a9ad4b7aa019686569

            SHA512

            fda4582fbc4dfeedab68ee1fde85ad4b30898370bbf1a462d41bba227803420408ec7129fbcf3e69166a6fb60918c46f5618e9a8c573dac7c1ccc86a39c88f38

            Download Submit

          • memory/848-0-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/848-1-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/848-7-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/848-14-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/848-21-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/848-28-0x0000000000400000-0x000000000042A000-memory.dmp

            Filesize

            168KB

            Download