Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
09-05-2024 23:38
General
-
Target
2186c8146cb78bb669fa95595954bfb0_NeikiAnalytics.exe
-
Size
197KB
-
MD5
2186c8146cb78bb669fa95595954bfb0
-
SHA1
e455f4abd7b5c23c87b1473bfc4e1015fdc5abce
-
SHA256
50cb0932ead4382c5643c7adb1480af24616cc52fff7dfebd31a89e375f0f7b8
-
SHA512
d1eb37c50ee68674d86098bda65b58039c14fffa34dbd7b1a2db8de6ce46873c076fe2c5f4885071f74fa26375a17e15dc6f2f4ec44e3828fb8f3e2215f11d2d
-
SSDEEP
6144:YB4ZdxBvEs98DwXkj3JWmZ8Zo7CyGH6Y6l:zFEsgj35rCyfv
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2186c8146cb78bb669fa95595954bfb0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2186c8146cb78bb669fa95595954bfb0_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2186c8146cb78bb669fa95595954bfb0_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\2186c8146cb78bb669fa95595954bfb0_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
197KB
MD5925453e8455641c6a24ab431b0bb379f
SHA1b4c6434c8796cb8d6fe214ec8f228633b4576132
SHA256cf22d7b98dc109019e1aacc95b1a8c8add019bb20c5d48dc3a179f56d24732f4
SHA512b444a1ce36e1f6a2277b8e56f75292b4e24d55dcf45a9a8dcb7ce9f7fd5714ee93eaff7d83be19e55ae994d9d2671ee66257aca75571f49791b5e2f0bda2c3db
-
Filesize
84KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB