Overview

overview

7

Static

static

7

a4bcf39ed3...cs.exe

windows7-x64

7

a4bcf39ed3...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-06-2024 05:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a4bcf39ed3b296643ef3d3c9275a45a0_NeikiAnalytics.exe

  • Size

    102KB

  • MD5

    a4bcf39ed3b296643ef3d3c9275a45a0

  • SHA1

    1e71274c9c9c48fa4451c0210ebc2310b540bbb0

  • SHA256

    8e180abba18562cc89d2f8a251ea66748382d5f3ed07662af6c8c5333af738d4

  • SHA512

    e034285c0ff3f91d32f384964c71b3992d457019597d42c0571210e1f415b4bc5e65fdec4525cd3310f7278fe9758704f53f06cd80141c98ae53e5e0aeb5001a

  • SSDEEP

    768:xGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAyH:szqsQ5PIt4+/yfeB6r6YcOik5h36lB4n

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\a4bcf39ed3b296643ef3d3c9275a45a0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\a4bcf39ed3b296643ef3d3c9275a45a0_NeikiAnalytics.exe"
    1⤵
      PID:1308

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\My Downloads\Clive Barker’s Undying Patch.exe
      Filesize

      102KB

      MD5

      dd88d142174f9a51d8b6dd5a3197f298

      SHA1

      d5162dae47eac3f14f7410291745553e7a8320db

      SHA256

      bc364c7394cd4389bc65e2e6863aaf22e976fcd420cef0253f9c367841854b30

      SHA512

      c388970c7dc2556c515958ac0d6396cc9c08fdc30bab9be8cf11454bb6045a4cdec53c61023fcb0e49c2b168df154aea6eb37a7dde4d2d1dd1a63b48f806edff

      Download Submit

    • memory/1308-0-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB

      Download

    • memory/1308-101-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB

      Download