Analysis
-
max time kernel
145s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
19/06/2024, 06:15
General
-
Target
98d9741496f08c44c2a4871fd9b56b80_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
98d9741496f08c44c2a4871fd9b56b80
-
SHA1
7c92e51962f09ebda3afc8e48d139af01efa0839
-
SHA256
34d177e9c1260c278f12c96adbc65e0464673aad8427cd406a2e6625733fe0a2
-
SHA512
aa8121904841d8753b4c439734ab56ee65ef7b91c4be252da38abaee12772b9f3c03e4f5990c84773d787f923e0275b9919c6354b759afe6ef46047fc1bb2ed0
-
SSDEEP
24576:ta+Mq+DI7mw4EhOSXby2rBB+EO62sZ6VwQ+RHW/nSEXZBsCymxOC:tPnmwBMSXbySBzp2sZ6Vl+R2/SCQm
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.126:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\98d9741496f08c44c2a4871fd9b56b80_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\98d9741496f08c44c2a4871fd9b56b80_NeikiAnalytics.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
632KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
632KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB