Analysis

  • max time kernel
    147s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-06-2024 21:51

General

  • Target

    2126114cddd95ff1de2827f0dcf0c9a473ee029ad7cbb5f712fd89b86ddb15d6_NeikiAnalytics.exe

  • Size

    2.6MB

  • MD5

    dafcc8962a67596e4e9732e414b16540

  • SHA1

    030457a7e50b1a8f3ad3f845ccc79b313f082c57

  • SHA256

    2126114cddd95ff1de2827f0dcf0c9a473ee029ad7cbb5f712fd89b86ddb15d6

  • SHA512

    22142ee6897e9fd65206301f15cca5ad7551e444304067d43e254ef6d627cfb9a61b35a88d15bbace7075109a4c9f4fe8801ca5681777fb5f3ccc530cf72a248

  • SSDEEP

    49152:p9W6UFUys+KbgRWXAxq7ceLiQp6S1bjlCSI4L51gvB0kRO:/9sUysvL9RNlC53O

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2126114cddd95ff1de2827f0dcf0c9a473ee029ad7cbb5f712fd89b86ddb15d6_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2126114cddd95ff1de2827f0dcf0c9a473ee029ad7cbb5f712fd89b86ddb15d6_NeikiAnalytics.exe"
    1⤵
      PID:3936

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3936-0-0x0000000074BFE000-0x0000000074BFF000-memory.dmp

      Filesize

      4KB

    • memory/3936-1-0x00000000006D0000-0x0000000000968000-memory.dmp

      Filesize

      2.6MB

    • memory/3936-2-0x0000000074BF0000-0x00000000753A0000-memory.dmp

      Filesize

      7.7MB

    • memory/3936-3-0x0000000006C90000-0x0000000007234000-memory.dmp

      Filesize

      5.6MB

    • memory/3936-4-0x0000000006990000-0x0000000006998000-memory.dmp

      Filesize

      32KB

    • memory/3936-5-0x0000000006A20000-0x0000000006A58000-memory.dmp

      Filesize

      224KB

    • memory/3936-6-0x00000000069B0000-0x00000000069BE000-memory.dmp

      Filesize

      56KB

    • memory/3936-7-0x0000000006A00000-0x0000000006A1C000-memory.dmp

      Filesize

      112KB

    • memory/3936-8-0x0000000006B00000-0x0000000006B92000-memory.dmp

      Filesize

      584KB

    • memory/3936-9-0x0000000074BF0000-0x00000000753A0000-memory.dmp

      Filesize

      7.7MB

    • memory/3936-10-0x0000000074BF0000-0x00000000753A0000-memory.dmp

      Filesize

      7.7MB

    • memory/3936-11-0x0000000074BF0000-0x00000000753A0000-memory.dmp

      Filesize

      7.7MB

    • memory/3936-12-0x0000000074BFE000-0x0000000074BFF000-memory.dmp

      Filesize

      4KB

    • memory/3936-13-0x0000000074BF0000-0x00000000753A0000-memory.dmp

      Filesize

      7.7MB

    • memory/3936-14-0x0000000074BF0000-0x00000000753A0000-memory.dmp

      Filesize

      7.7MB

    • memory/3936-15-0x0000000074BF0000-0x00000000753A0000-memory.dmp

      Filesize

      7.7MB