Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
09-05-2024 23:20
General
-
Target
1cda9e6b072e601fe2f4c85df0895850_NeikiAnalytics.exe
-
Size
76KB
-
MD5
1cda9e6b072e601fe2f4c85df0895850
-
SHA1
dc6c16fa97c048f8a9f4053f18ea9ae5bdf66e73
-
SHA256
348057b2b9ce267ec97cebdf6b20bbfef204cbb16f3c18463f31ef0663c512f3
-
SHA512
d3539c8cd8c8823966e521ac58b3a86733783466668c6062f5cd36823e330cef30045f644d2eeb3bb27a25795114cf8ce8005fe3092ad139e73ecacac1a0f018
-
SSDEEP
1536:zaWLF1kxTnUI4CFPtv6iSJnaGlbVUhoq:zaWExTnUTCFPtvanaGlbVUho
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1cda9e6b072e601fe2f4c85df0895850_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\1cda9e6b072e601fe2f4c85df0895850_NeikiAnalytics.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\Winkjz.exeC:\Windows\SysWOW64\Winkjz.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
82KB
MD5f2346a7d5a520050a0330cf23d46db16
SHA1741a787bf97cbea8a848871d82c7dde496c5da21
SHA256e20d8ea718df431f328841f10229ab19392e31b94301582f3ab5893d9db2e756
SHA512c3f270692b08ae9c39b58ce163eb26f4ed4f7ab0531ca3f08a3ea15de0a19e9d1c55b168a00ce59626b06d96ac59b48256c29183802876bd612606255883a25e
-
Filesize
596KB
-
Filesize
596KB
-
Filesize
596KB