General
-
Target
011ada88a640ea14559a65cd8ad46ea0_NeikiAnalytics.exe
-
Size
903KB
-
Sample
240616-yw4m1svhqd
-
MD5
011ada88a640ea14559a65cd8ad46ea0
-
SHA1
5b8ca5175133f2a778b1b3487b180ce48677fe1d
-
SHA256
4fb919ac770ba38c2953e4e1291ed6e80f34208cc911eaf8b2374d2ee8d61e9b
-
SHA512
c55d4242f3ab501353f09f59efd8ef516e619738562c9f0d52df893fad5e652315ec7c38b24f828751b200f53eb4dee0a9bb635b39216f59f502e8e39604304a
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5y:gh+ZkldoPK8YaKGy
Static task
static1
Behavioral task
behavioral1
Sample
011ada88a640ea14559a65cd8ad46ea0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
011ada88a640ea14559a65cd8ad46ea0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
011ada88a640ea14559a65cd8ad46ea0_NeikiAnalytics.exe
-
Size
903KB
-
MD5
011ada88a640ea14559a65cd8ad46ea0
-
SHA1
5b8ca5175133f2a778b1b3487b180ce48677fe1d
-
SHA256
4fb919ac770ba38c2953e4e1291ed6e80f34208cc911eaf8b2374d2ee8d61e9b
-
SHA512
c55d4242f3ab501353f09f59efd8ef516e619738562c9f0d52df893fad5e652315ec7c38b24f828751b200f53eb4dee0a9bb635b39216f59f502e8e39604304a
-
SSDEEP
24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5y:gh+ZkldoPK8YaKGy
Score10/10-
Drops startup file
-
Suspicious use of SetThreadContext
-