Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    27-06-2024 22:14

General

  • Target

    2b9005e8854409920aca5f6fb29359bbe39464ddc883376d134226e37e1eb1fa_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    f4bfd971734069c42721b9efd99fe870

  • SHA1

    ded69149ed841f7345cc4c548d3fb759cbf10259

  • SHA256

    2b9005e8854409920aca5f6fb29359bbe39464ddc883376d134226e37e1eb1fa

  • SHA512

    31ea1f1ccd0c560439db41d8e6400f3d52a09a7312521fd39ceedc2b85704496cadc8a552c748872b8dadb2b9ec84db77f1aea62df00e9841288c7c099a5bf01

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+XK:LJ0TAz6Mte4A+aaZx8EnCGVuX

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2b9005e8854409920aca5f6fb29359bbe39464ddc883376d134226e37e1eb1fa_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2b9005e8854409920aca5f6fb29359bbe39464ddc883376d134226e37e1eb1fa_NeikiAnalytics.exe"
    1⤵
      PID:2480

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-mJtdfB5LQiDh3Ore.exe

      Filesize

      83KB

      MD5

      775afe7b3f5430f6d950c3faa9954f54

      SHA1

      f9051b56036e0a7ae616493a60fcc829ea68d3f9

      SHA256

      620e7a4312fb2d35febcc7ecec155d6673961eae0770f6394528e5b5110500c6

      SHA512

      eb065edd7beeed945b53994b7c28841f8ace61a31d98847305347c2fac18c9c10806220a227678c69c07ec95205a654818f936382b38c0b5e301cbf1d535c6dc

    • memory/2480-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2480-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2480-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2480-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2480-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2480-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB