General
-
Target
35e66a782a7d7274abde9e5f059b30b6185752607d6547281d396d9a92be7326_NeikiAnalytics.exe
-
Size
903KB
-
Sample
240620-ffrpeazcjh
-
MD5
3e326a5a26ac70b1f44055647ec343e0
-
SHA1
ab6fea45aa267a555fc2b58cf30bf78aa5494329
-
SHA256
35e66a782a7d7274abde9e5f059b30b6185752607d6547281d396d9a92be7326
-
SHA512
5bde684569a873eeb2e50c6a01d088163ac965bed72e2fd6916fc140e38dba4d14b471fb87ac4f4ed230f6dbfd2fc0c6f6049e37a42d4e4d83e15caae0ab7006
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5y:gh+ZkldoPK8YaKGy
Static task
static1
Behavioral task
behavioral1
Sample
35e66a782a7d7274abde9e5f059b30b6185752607d6547281d396d9a92be7326_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
35e66a782a7d7274abde9e5f059b30b6185752607d6547281d396d9a92be7326_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
35e66a782a7d7274abde9e5f059b30b6185752607d6547281d396d9a92be7326_NeikiAnalytics.exe
-
Size
903KB
-
MD5
3e326a5a26ac70b1f44055647ec343e0
-
SHA1
ab6fea45aa267a555fc2b58cf30bf78aa5494329
-
SHA256
35e66a782a7d7274abde9e5f059b30b6185752607d6547281d396d9a92be7326
-
SHA512
5bde684569a873eeb2e50c6a01d088163ac965bed72e2fd6916fc140e38dba4d14b471fb87ac4f4ed230f6dbfd2fc0c6f6049e37a42d4e4d83e15caae0ab7006
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5y:gh+ZkldoPK8YaKGy
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-