059739d14f2555f08d5fe7ebda53f8f8c6f8f4176b3517d67f471c9da385af21

Analysis

max time kernel
141s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
09/05/2024, 09:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

071f4caefe42e24fcd82fb13a01f4a90_NEIKI.exe
Size

2.9MB
MD5

071f4caefe42e24fcd82fb13a01f4a90
SHA1

20eab01639f84ed953bba6d3ce1dab38b45c258f
SHA256

059739d14f2555f08d5fe7ebda53f8f8c6f8f4176b3517d67f471c9da385af21
SHA512

d13d49437d38a39b04afb25c56945dfa572afff48d2e2fdf8f6faeb66cc537fab54f6d4e68f0ea13b6fd19cc535e3d5fbacc020f1651c628db1429e18c139892
SSDEEP

49152:k0P4bHtmGIFuXFO/Ise9yrRikYQOHhqfRdr4ADiYDyXSLf6sB8f3Najcl:5uHtFO/UQbY7B6BDoSL6OmiC

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file

Executes dropped EXE 1 IoCs

pid	Process
2732	7z2301-x64.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
644	071f4caefe42e24fcd82fb13a01f4a90_NEIKI.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 644 wrote to memory of 2732	644	071f4caefe42e24fcd82fb13a01f4a90_NEIKI.exe	91
PID 644 wrote to memory of 2732	644	071f4caefe42e24fcd82fb13a01f4a90_NEIKI.exe	91
PID 644 wrote to memory of 2732	644	071f4caefe42e24fcd82fb13a01f4a90_NEIKI.exe	91

C:\Users\Admin\AppData\Local\Temp\071f4caefe42e24fcd82fb13a01f4a90_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\071f4caefe42e24fcd82fb13a01f4a90_NEIKI.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:644
- C:\Users\Admin\AppData\Local\Temp\7z2301-x64.exe
  C:\Users\Admin\AppData\Local\Temp\7z2301-x64.exe
  2⤵
  - Executes dropped EXE
  PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\7z2301-x64.exe

Filesize
1.5MB

MD5
e5788b13546156281bf0a4b38bdd0901

SHA1
7df28d340d7084647921cc25a8c2068bb192bdbb

SHA256
26cb6e9f56333682122fafe79dbcdfd51e9f47cc7217dccd29ac6fc33b5598cd

SHA512
1f4da167ff2f1d34eeaf76c3003ba5fcabfc7a7da40e73e317aa99c6e1321cdf97e00f4feb9e79e1a72240e0376af0c3becb3d309e5bb0385e5192da17ea77ff

Download Submit
memory/644-21-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-29-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-9-0x0000000003E50000-0x0000000003FB0000-memory.dmp

Filesize
1.4MB

Download
memory/644-8-0x0000000003E50000-0x0000000003FB0000-memory.dmp

Filesize
1.4MB

Download
memory/644-12-0x00000000047A0000-0x00000000047A1000-memory.dmp

Filesize
4KB

Download
memory/644-14-0x0000000003E50000-0x0000000003E51000-memory.dmp

Filesize
4KB

Download
memory/644-13-0x0000000002D10000-0x0000000002D70000-memory.dmp

Filesize
384KB

Download
memory/644-11-0x00000000047A0000-0x00000000047A1000-memory.dmp

Filesize
4KB

Download
memory/644-7-0x0000000003E50000-0x00000000047A0000-memory.dmp

Filesize
9.3MB

Download
memory/644-5-0x0000000002F90000-0x0000000002F91000-memory.dmp

Filesize
4KB

Download
memory/644-30-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-4-0x0000000002F40000-0x0000000002F41000-memory.dmp

Filesize
4KB

Download
memory/644-17-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-16-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-19-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-0-0x0000000000400000-0x000000000106D000-memory.dmp

Filesize
12.4MB

Download
memory/644-10-0x0000000003E60000-0x0000000003E61000-memory.dmp

Filesize
4KB

Download
memory/644-28-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-15-0x0000000003E50000-0x0000000003E51000-memory.dmp

Filesize
4KB

Download
memory/644-27-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-26-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-25-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-24-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-23-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-22-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-20-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-18-0x0000000003E60000-0x0000000003EE0000-memory.dmp

Filesize
512KB

Download
memory/644-3-0x0000000002F20000-0x0000000002F21000-memory.dmp

Filesize
4KB

Download
memory/644-2-0x0000000002F70000-0x0000000002F71000-memory.dmp

Filesize
4KB

Download
memory/644-1-0x0000000002F60000-0x0000000002F61000-memory.dmp

Filesize
4KB

Download
memory/644-6-0x0000000002FB0000-0x0000000002FB1000-memory.dmp

Filesize
4KB

Download
memory/644-52-0x0000000000400000-0x000000000106D000-memory.dmp

Filesize
12.4MB

Download
memory/644-54-0x0000000002D10000-0x0000000002D70000-memory.dmp

Filesize
384KB

Download
memory/644-53-0x0000000000400000-0x000000000106D000-memory.dmp

Filesize
12.4MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads