maui | efb858ac819d817124ae0c658ae351da8c9bce54c7b36708affa22f4676f02bb

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
17-06-2024 00:36

Target

261914484ac67e6eb5d94084a559c0b0_NeikiAnalytics.exe
Size

331KB
MD5

261914484ac67e6eb5d94084a559c0b0
SHA1

acd8ad613ec4f1094af337c59063847c75b4a19b
SHA256

efb858ac819d817124ae0c658ae351da8c9bce54c7b36708affa22f4676f02bb
SHA512

a4efd5e0f72bd01aba8761195757602520ac2e9328356e99360ea533e94ecc79f8b6b660cef157562b11d6e5d59cb464d9493b3d4de30f1280a6b5834c4cdb3f
SSDEEP

6144:dgj1SzLLw09lIbrgsYLbxkPbiXncmurMQL0CZWxEWlz+N6Zt5ZijH4t6fl6g8+Ng:dgj1EPXCP1mcBk+YZU4t/g8kS9GS

Score

10^/10

maui ransomware upx

Detect Maui ransomware 1 IoCs

resource	yara_rule
behavioral2/memory/4884-2-0x0000000000B00000-0x0000000000BCE000-memory.dmp	family_maui

Maui Ransomware
Ransomware-as-a-Service which first appeared in 2022.
ransomware maui

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4884-0-0x0000000000B00000-0x0000000000BCE000-memory.dmp	upx
behavioral2/memory/4884-2-0x0000000000B00000-0x0000000000BCE000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\261914484ac67e6eb5d94084a559c0b0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\261914484ac67e6eb5d94084a559c0b0_NeikiAnalytics.exe"
1⤵
PID:4884

memory/4884-0-0x0000000000B00000-0x0000000000BCE000-memory.dmp

Filesize
824KB

Download
memory/4884-2-0x0000000000B00000-0x0000000000BCE000-memory.dmp

Filesize
824KB

Download