Extracted

• • Target

    b344307eef7af6f9d4be08b2083a53e8a3bf2a0a082caea0480093745522423e_NeikiAnalytics.exe

  • Size

    5.0MB

  • MD5

    bbc420393f77fb1ddff1c15197834390

  • SHA1

    1aaeed804f66c58929d2afed87a0f95bd83d308c

  • SHA256

    b344307eef7af6f9d4be08b2083a53e8a3bf2a0a082caea0480093745522423e

  • SHA512

    cff5432167eb5a637e517c2c34447703794967cba9111a7c5e542589255fe441498fc17fa5bca84c5eec2e287e99fef04619fbe2177cd136a5f1ac6b3b21312e

  • SSDEEP

    98304:U9kjXlE9W6Djdvyj/uNHqJMsXBg/qMBBmuOeJMvFbgWWZcOlgOU:U2jXO9WgEJRXBg4unM+NcUA

  Score

  10^/10

  riseproevasionstealerthemidatrojan

  • RisePro

    RisePro stealer is an infostealer distributed by PrivateLoader.

    stealerrisepro

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2