General
-
Target
7cf59c8081583f6e2a32bd8d2d6d952c539efc2949c55af39758ed16d9e02eaf_NeikiAnalytics.exe
-
Size
951KB
-
Sample
240624-q9hzgaygkr
-
MD5
f16f7596394fa1852aaab2eb6a43bad0
-
SHA1
506d7792e9f7d2506a0cb102cda1dffeadac5755
-
SHA256
7cf59c8081583f6e2a32bd8d2d6d952c539efc2949c55af39758ed16d9e02eaf
-
SHA512
473121dc5fc7ffd37bdefd447b02983dffc56730b710f772024a2e974286c73503116763c115f38f35394b37751caef9c093eede90740946f258616caa5eff6a
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5f:Rh+ZkldDPK8YaKjf
Static task
static1
Behavioral task
behavioral1
Sample
7cf59c8081583f6e2a32bd8d2d6d952c539efc2949c55af39758ed16d9e02eaf_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7cf59c8081583f6e2a32bd8d2d6d952c539efc2949c55af39758ed16d9e02eaf_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
revengerat
Marzo26
marzorevenger.duckdns.org:4230
RV_MUTEX-PiGGjjtnxDpn
Targets
-
-
Target
7cf59c8081583f6e2a32bd8d2d6d952c539efc2949c55af39758ed16d9e02eaf_NeikiAnalytics.exe
-
Size
951KB
-
MD5
f16f7596394fa1852aaab2eb6a43bad0
-
SHA1
506d7792e9f7d2506a0cb102cda1dffeadac5755
-
SHA256
7cf59c8081583f6e2a32bd8d2d6d952c539efc2949c55af39758ed16d9e02eaf
-
SHA512
473121dc5fc7ffd37bdefd447b02983dffc56730b710f772024a2e974286c73503116763c115f38f35394b37751caef9c093eede90740946f258616caa5eff6a
-
SSDEEP
24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5f:Rh+ZkldDPK8YaKjf
Score10/10-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of SetThreadContext
-