Analysis
-
max time kernel
146s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
22-06-2024 08:04
General
-
Target
89e1706c1062a200df8d945d217e2bcd60061b990371c899a8b1e7f2e8675573_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
74e249f389a2b320dc7c1d8dc0a0cb70
-
SHA1
49d3d680e80f7715bf4b7212820e17f722f44052
-
SHA256
89e1706c1062a200df8d945d217e2bcd60061b990371c899a8b1e7f2e8675573
-
SHA512
012a88028c3ef96e55ba5c6f0a4fa342bc2c584f8355947147208a69b58a5e4d8527cbcf3f0b9454e77a43aaa24ef2eece19f1db591104c486fbdbba013b2287
-
SSDEEP
24576:hgFEU93CEag9VEUSomr/AKH/jmQwQ7BaWnBCqaCNU4NGymxOnVt9Wf:hQEU93racEUSjr/AU/jmQl7BaWnta0UZ
Score
10/10
Malware Config
Extracted
Family
risepro
C2
147.45.47.126:58709
Signatures
-
RisePro
RisePro stealer is an infostealer distributed by PrivateLoader.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 15 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\89e1706c1062a200df8d945d217e2bcd60061b990371c899a8b1e7f2e8675573_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\89e1706c1062a200df8d945d217e2bcd60061b990371c899a8b1e7f2e8675573_NeikiAnalytics.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.2MB
-
Filesize
632KB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB
-
Filesize
5.2MB