Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
09-05-2024 13:24
General
-
Target
4565bdc68b98c18a7f28109ddd2979a0_NeikiAnalytics.exe
-
Size
353KB
-
MD5
4565bdc68b98c18a7f28109ddd2979a0
-
SHA1
d4d068e655bc6e3d5f63f5430574403145d30a1d
-
SHA256
1806c45753ccc55536e39224f1a666e22ee0cb0b7824046236e3ee117ecad0a6
-
SHA512
6b73da4c8f3c6faaed0a754b503fcc1ee700f40456e0bfe92341729d8c202af9e6ea37364837adf521334f6b94c1b0818e9842b988c36f152b2372d63a27b334
-
SSDEEP
3072:bEHuVcqMIrEM/3ruhHpPKeqv1l/fnv+8UMBZJrX53FcCjYvQd2a:bEHQcqMIb3ihHIeqtl/HHZv3Fcta
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4565bdc68b98c18a7f28109ddd2979a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\4565bdc68b98c18a7f28109ddd2979a0_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Intel\WMIC.exeC:\Intel\WMIC.exe2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ed716e7d91d72cde335ea1903c72fa57
SHA17584e9bbb97073f26f6087474ccaf2e9bad75671
SHA2565b500c27bbfe2a2d6fb63930e7ea2a77483036b1ec46222f855b445d628f2547
SHA5128a403cc9dcf00ad951602aae9a3cfff37f5cbd4f84baf607177f2bd7321ac58b90b969472fb4b44ee0585db05b0ddd1b6628a2b0990e73c6de2fc3d24e9945cb
-
Filesize
353KB
MD5e6252d55c90742465557015be594f7a2
SHA1ed27d6ef06c15fa3da93b760888a33b6f2544bcb
SHA2566d93696161393d6e6641a7129fcfd7dd1d0b5733271e26d33fa5b6a60b09ef3b
SHA512106ab79063157faa7940e9eafbadfab8d9b06ac4445be6eae973c745b332a40043c77b7489e0d492d94d270b77ad65dde5f31167ad0845733567a2e5d08e3d73
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB
-
Filesize
348KB