Analysis
-
max time kernel
146s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
18/06/2024, 13:48
General
-
Target
4cec30acdda87decd4c2f9b9ab930370_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
4cec30acdda87decd4c2f9b9ab930370
-
SHA1
e6383b7290901f3a59d31bd67b45c1cfb27eaeea
-
SHA256
4a3791594dfb02104afcc57f582a3ba692012be088dfcb20b82777a4a393acb6
-
SHA512
b266a30136c913c8b4511f2b65593b82c90fe30db5eca4a5d45ef681a5259ee50fb47d267fde57832d4ededa2727853ae415160a4cea9242b5ab3cc7fce7bf40
-
SSDEEP
24576:NK4COyfEFtOxRy0i5LtLhrcw6R0/n3rwwQIN2K3yWds0JkKyVG4SbPA9RZbmNrUa:NK4LWEFai5LtLVcw6R2cltadsLJeeRZ6
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.126:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4cec30acdda87decd4c2f9b9ab930370_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\4cec30acdda87decd4c2f9b9ab930370_NeikiAnalytics.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
632KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB