Analysis

  • max time kernel
    0s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-06-2024 13:27

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\0151cacc18c85e56eba6f39eaa4979e064f3f07fc24726241a04f60632c95368_NeikiAnalytics.exe command="C:\Users\Admin\AppData\Local\Temp\0151cacc18c85e56eba6f39eaa4979e064f3f07fc24726241a04f60632c95368_NeikiAnalytics.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    0151cacc18c85e56eba6f39eaa4979e064f3f07fc24726241a04f60632c95368_NeikiAnalytics.exe

  • Size

    2.2MB

  • MD5

    024442da80264856852d24d9b234e220

  • SHA1

    7a3369b483199ed96f9bd82afab3a90b64352ab7

  • SHA256

    0151cacc18c85e56eba6f39eaa4979e064f3f07fc24726241a04f60632c95368

  • SHA512

    033818a93ac6a09325d1fcf0ed0e8ebf34711036332a10cca7d367cf3011ac499121172ea1aeb05aa1660d0495fe15b6bc4c67d3d6ba86731fdd580abea8e62b

  • SSDEEP

    49152:yMO48+ChdaUIoVTCd6xGlCGTBKsZ4yrJ+P6HsH4xrKRlwY:yPZ+WaUIRLZ42+iHZrKRl

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0151cacc18c85e56eba6f39eaa4979e064f3f07fc24726241a04f60632c95368_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0151cacc18c85e56eba6f39eaa4979e064f3f07fc24726241a04f60632c95368_NeikiAnalytics.exe"
    1⤵
      PID:1896

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1896-0-0x0000000000120000-0x00000000007A4000-memory.dmp

      Filesize

      6.5MB