General
-
Target
5e6e9259589390b238d56854a17db3977059b86e2f1d07f2ba757feaa8bca6f2_NeikiAnalytics.exe
-
Size
903KB
-
Sample
240620-nyqh3awaqh
-
MD5
ab5b8841728c4fad839650ee37223920
-
SHA1
4ae82e83df7fe1704a56cfa23172041ab3408a6a
-
SHA256
5e6e9259589390b238d56854a17db3977059b86e2f1d07f2ba757feaa8bca6f2
-
SHA512
392cea7650cebf72d69daf535f8f4c35804516d02fd53c4f301c7b271b91ea09243153a761c184dcd26f943b062fc5afb6ff132e4645e53a084d8a3f93927306
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5H:gh+ZkldoPK8YaKGH
Static task
static1
Behavioral task
behavioral1
Sample
5e6e9259589390b238d56854a17db3977059b86e2f1d07f2ba757feaa8bca6f2_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
5e6e9259589390b238d56854a17db3977059b86e2f1d07f2ba757feaa8bca6f2_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
5e6e9259589390b238d56854a17db3977059b86e2f1d07f2ba757feaa8bca6f2_NeikiAnalytics.exe
-
Size
903KB
-
MD5
ab5b8841728c4fad839650ee37223920
-
SHA1
4ae82e83df7fe1704a56cfa23172041ab3408a6a
-
SHA256
5e6e9259589390b238d56854a17db3977059b86e2f1d07f2ba757feaa8bca6f2
-
SHA512
392cea7650cebf72d69daf535f8f4c35804516d02fd53c4f301c7b271b91ea09243153a761c184dcd26f943b062fc5afb6ff132e4645e53a084d8a3f93927306
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5H:gh+ZkldoPK8YaKGH
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-