Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 04:48

General

  • Target

    3698524265eb6a84b234bee9e00cf59ea08b43af82a13e16be5f37352125185b_NeikiAnalytics.exe

  • Size

    83KB

  • MD5

    92b5174b3c205d44255512bce56be000

  • SHA1

    bb02736cbd72207b6fa9df43b109c072d7039bdf

  • SHA256

    3698524265eb6a84b234bee9e00cf59ea08b43af82a13e16be5f37352125185b

  • SHA512

    bc53a56e63ac5848b1eebec9885e8732b6987f985e8eb0f2ed0b32763faba55f14d57846303bb372dc001ec90bd37c37c2fb3b3c7a47254227cc6a4533155737

  • SSDEEP

    1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+yK:LJ0TAz6Mte4A+aaZx8EnCGVuy

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 7 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Users\Admin\AppData\Local\Temp\3698524265eb6a84b234bee9e00cf59ea08b43af82a13e16be5f37352125185b_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\3698524265eb6a84b234bee9e00cf59ea08b43af82a13e16be5f37352125185b_NeikiAnalytics.exe"
    1⤵
      PID:2224

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\rifaien2-KbUiRDADR6PQLGl7.exe

      Filesize

      83KB

      MD5

      eb71cf57d13320118295badfadfc23a8

      SHA1

      6bbe686f2b28ba904fc20be013e7184b542b05b3

      SHA256

      fc013ca77193c0c2a5dfc27a8260323cd35733e2094bfa8c6b3cdd8c98b33f85

      SHA512

      30ab84980d00a8c5c2a0fa19ca4a4b226d76885273fea1f93b3e5e2f1bf2509ca4bfac09f7d0a3cfc5c1663d937d9d07ca4d850eb201340f83c4c3c8329da5d4

    • memory/2224-0-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2224-1-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2224-7-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2224-14-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2224-21-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB

    • memory/2224-28-0x0000000000400000-0x000000000042A000-memory.dmp

      Filesize

      168KB