General
-
Target
29678b02f23d713a7f1981c8ef19a15e4e5c1322a8ec8d307a292c2220d02466_NeikiAnalytics.exe
-
Size
951KB
-
Sample
240626-agvjssscra
-
MD5
626a89b49eb792ec407b7b61b29e05f0
-
SHA1
78747b4e5fffd45d78dc840953111c1188b75a8f
-
SHA256
29678b02f23d713a7f1981c8ef19a15e4e5c1322a8ec8d307a292c2220d02466
-
SHA512
8b52d65f16414dba5673a57ac0ef4ecdb570476dcebef41a9e50efb5a06e74b6d106bac2611222f9977224e9143e752496296336c62e7e537327551095c57c8d
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5V:Rh+ZkldDPK8YaKjV
Static task
static1
Behavioral task
behavioral1
Sample
29678b02f23d713a7f1981c8ef19a15e4e5c1322a8ec8d307a292c2220d02466_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
29678b02f23d713a7f1981c8ef19a15e4e5c1322a8ec8d307a292c2220d02466_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
29678b02f23d713a7f1981c8ef19a15e4e5c1322a8ec8d307a292c2220d02466_NeikiAnalytics.exe
-
Size
951KB
-
MD5
626a89b49eb792ec407b7b61b29e05f0
-
SHA1
78747b4e5fffd45d78dc840953111c1188b75a8f
-
SHA256
29678b02f23d713a7f1981c8ef19a15e4e5c1322a8ec8d307a292c2220d02466
-
SHA512
8b52d65f16414dba5673a57ac0ef4ecdb570476dcebef41a9e50efb5a06e74b6d106bac2611222f9977224e9143e752496296336c62e7e537327551095c57c8d
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5V:Rh+ZkldDPK8YaKjV
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-