General
-
Target
b2b9c05240cf93c0e87f92370642f59a3df09d968e860a6bf90cf393af1c1e05_NeikiAnalytics.exe
-
Size
903KB
-
Sample
240629-tn8jsatfrk
-
MD5
4314527b3a6bebd5ec8dd14f4fed5690
-
SHA1
13d8ab93929f6649054b4553af2f7bb10cf9fc33
-
SHA256
b2b9c05240cf93c0e87f92370642f59a3df09d968e860a6bf90cf393af1c1e05
-
SHA512
1bc49a32fbd04f7365ffc391c620d22eed451ceb1f7f538c7dce810682c6e37584c8388143c9cbb21df356c9440448f401be608bff4239b5c56b802d8468a0e1
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5s:gh+ZkldoPK8YaKGs
Static task
static1
Behavioral task
behavioral1
Sample
b2b9c05240cf93c0e87f92370642f59a3df09d968e860a6bf90cf393af1c1e05_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b2b9c05240cf93c0e87f92370642f59a3df09d968e860a6bf90cf393af1c1e05_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
b2b9c05240cf93c0e87f92370642f59a3df09d968e860a6bf90cf393af1c1e05_NeikiAnalytics.exe
-
Size
903KB
-
MD5
4314527b3a6bebd5ec8dd14f4fed5690
-
SHA1
13d8ab93929f6649054b4553af2f7bb10cf9fc33
-
SHA256
b2b9c05240cf93c0e87f92370642f59a3df09d968e860a6bf90cf393af1c1e05
-
SHA512
1bc49a32fbd04f7365ffc391c620d22eed451ceb1f7f538c7dce810682c6e37584c8388143c9cbb21df356c9440448f401be608bff4239b5c56b802d8468a0e1
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5s:gh+ZkldoPK8YaKGs
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-