General
-
Target
180982de6b22acddfd117d307569d453287a56037777307ac73e460f4eaaf69d_NeikiAnalytics.exe
-
Size
903KB
-
Sample
240630-zghbxaybmn
-
MD5
e8ed43a5c421f30e292bd0c710dcb130
-
SHA1
5d338d5beb53796672177a479082a7dcf3025ff0
-
SHA256
180982de6b22acddfd117d307569d453287a56037777307ac73e460f4eaaf69d
-
SHA512
e4bbe3d6dc361912ff697266549fe3aa6b6a9cace35115f986784e520d4d2b87d0b4fa8c075d33340f04ad9bad72c0a5362ec360098f46b2edc15d2cdc08e6bd
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5R:gh+ZkldoPK8YaKGR
Static task
static1
Behavioral task
behavioral1
Sample
180982de6b22acddfd117d307569d453287a56037777307ac73e460f4eaaf69d_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
180982de6b22acddfd117d307569d453287a56037777307ac73e460f4eaaf69d_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
180982de6b22acddfd117d307569d453287a56037777307ac73e460f4eaaf69d_NeikiAnalytics.exe
-
Size
903KB
-
MD5
e8ed43a5c421f30e292bd0c710dcb130
-
SHA1
5d338d5beb53796672177a479082a7dcf3025ff0
-
SHA256
180982de6b22acddfd117d307569d453287a56037777307ac73e460f4eaaf69d
-
SHA512
e4bbe3d6dc361912ff697266549fe3aa6b6a9cace35115f986784e520d4d2b87d0b4fa8c075d33340f04ad9bad72c0a5362ec360098f46b2edc15d2cdc08e6bd
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5R:gh+ZkldoPK8YaKGR
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-