Analysis
-
max time kernel
134s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
08/05/2024, 08:02
General
-
Target
1d51a9dc3ddf71bef6549635f4a81ce0_NEIKI.exe
-
Size
730KB
-
MD5
1d51a9dc3ddf71bef6549635f4a81ce0
-
SHA1
4b321d5db3d5ed8fcc194dbaa7183f6dd9606607
-
SHA256
5d5416e3d6f558f79eb06c5e7b408ef5eda696c2a644cdb2be05c073277b5819
-
SHA512
4bd1e3ad8119f3f9ed27ffe0221655864ce800d527ca51e79721351b65ad9827f5a3aad085b5f12de9a3041b6edda61883887a18aed3d318fdae8b50277d0412
-
SSDEEP
12288:iPQE1DjEJFc6/xbnaPLqumoxV+a0zcBpwC4HymEkxI3QtGd0OTroRT7JmKso5szl:ejgFV/paqVYwmTrSJmPomUxR4lIk2pCd
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1d51a9dc3ddf71bef6549635f4a81ce0_NEIKI.exe"C:\Users\Admin\AppData\Local\Temp\1d51a9dc3ddf71bef6549635f4a81ce0_NEIKI.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x500 0x5041⤵
- Suspicious use of AdjustPrivilegeToken