Overview

overview

7

Static

static

7

a248656caa...cs.exe

windows7-x64

7

a248656caa...cs.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a248656caa9a7eb086ea885d3240f9ff25d066e2951b6ee5325458e8f35d82b7_NeikiAnalytics.exe

  • Size

    528KB

  • Sample

    240628-vlwmwaxbnh

  • MD5

    feabdf1bbb4e187f68bfe9fe052ab4a0

  • SHA1

    c1317132081d1dafa377a3c731896f1dd5adc171

  • SHA256

    a248656caa9a7eb086ea885d3240f9ff25d066e2951b6ee5325458e8f35d82b7

  • SHA512

    4005a42d62ad0fad9495b777d461249065446237085d69bdc4c490076f0b63d5a8e84f72c837d88524d4c9af9bf721a9732d1959a4573f944f4b72829dda77ba

  • SSDEEP

    12288:iMsme5xls0JbES52oFywx4QTn1QgrYNbMqVpYWf:ImW60Jbx2oFyvQTn1prYNMwX

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      a248656caa9a7eb086ea885d3240f9ff25d066e2951b6ee5325458e8f35d82b7_NeikiAnalytics.exe

    • Size

      528KB

    • MD5

      feabdf1bbb4e187f68bfe9fe052ab4a0

    • SHA1

      c1317132081d1dafa377a3c731896f1dd5adc171

    • SHA256

      a248656caa9a7eb086ea885d3240f9ff25d066e2951b6ee5325458e8f35d82b7

    • SHA512

      4005a42d62ad0fad9495b777d461249065446237085d69bdc4c490076f0b63d5a8e84f72c837d88524d4c9af9bf721a9732d1959a4573f944f4b72829dda77ba

    • SSDEEP

      12288:iMsme5xls0JbES52oFywx4QTn1QgrYNbMqVpYWf:ImW60Jbx2oFyvQTn1prYNMwX

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks