General
-
Target
92887e4ddec91a38c18abe1f35f137fdb2ce42b6fbeb7292b6bd61b19355aac1_NeikiAnalytics.exe
-
Size
951KB
-
Sample
240622-myk3xavdpe
-
MD5
f773933cc221d98ed78edaa044046630
-
SHA1
83af57d25317f389fcbb61081489651f329476c0
-
SHA256
92887e4ddec91a38c18abe1f35f137fdb2ce42b6fbeb7292b6bd61b19355aac1
-
SHA512
b65e373a569d82f05c5ed36ac7616c0cdb702c7f31eb56449169ad75690808aef6d97d191fddafccb05317d22966b952871245476272bcc1eecdf2d08955296e
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5/:Rh+ZkldDPK8YaKj/
Static task
static1
Behavioral task
behavioral1
Sample
92887e4ddec91a38c18abe1f35f137fdb2ce42b6fbeb7292b6bd61b19355aac1_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
92887e4ddec91a38c18abe1f35f137fdb2ce42b6fbeb7292b6bd61b19355aac1_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
92887e4ddec91a38c18abe1f35f137fdb2ce42b6fbeb7292b6bd61b19355aac1_NeikiAnalytics.exe
-
Size
951KB
-
MD5
f773933cc221d98ed78edaa044046630
-
SHA1
83af57d25317f389fcbb61081489651f329476c0
-
SHA256
92887e4ddec91a38c18abe1f35f137fdb2ce42b6fbeb7292b6bd61b19355aac1
-
SHA512
b65e373a569d82f05c5ed36ac7616c0cdb702c7f31eb56449169ad75690808aef6d97d191fddafccb05317d22966b952871245476272bcc1eecdf2d08955296e
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5/:Rh+ZkldDPK8YaKj/
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-