Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08-05-2024 10:15
General
-
Target
5dbb6805c12864537de6d47ac213e3b0_NEIKI.exe
-
Size
944KB
-
MD5
5dbb6805c12864537de6d47ac213e3b0
-
SHA1
2e215e19b937f8a136fd54e47b8e15210b2b70b4
-
SHA256
0f3d536ccc44f21df740233a2a378ea957cadd93cf88c6dcecb4c03008ae6436
-
SHA512
29eebead25a743fab2ad1d91fa117d22fa1483a83618277439f4b735893c12a9f35b832bef907173fdd51cba57942edaed1b09dacb52b8e50b95418243f67c73
-
SSDEEP
24576:KvTyOJGlLUpvMv1DaqctTr5J+A6nba/ZS/QERT77Ld:Kv/GlL4vMp6D+rnbggQERTbd
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5dbb6805c12864537de6d47ac213e3b0_NEIKI.exe"C:\Users\Admin\AppData\Local\Temp\5dbb6805c12864537de6d47ac213e3b0_NEIKI.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5dbb6805c12864537de6d47ac213e3b0_NEIKI.exeC:\Users\Admin\AppData\Local\Temp\5dbb6805c12864537de6d47ac213e3b0_NEIKI.exe2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
944KB
MD5e53b528f430d69e9aabbc0ccfe60bb5d
SHA17acd661ab9e356fab713789d8e5bf6e3409e2d1d
SHA256e1094efef709d124565caf760641aaabe9ef0b2b9f1992e57c13bf732a61410a
SHA512d36c01caa8a06e24972a04be7955a855009064fd8cf9b734d0685dcaa7d39fa9d66ce5dbbbe577bcecdb87702e62ca90e07030a2bd4b54af22a18599578ddf8c
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB