Analysis

  • max time kernel
    149s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/05/2024, 14:30

General

  • Target

    5e6eeb6c120d3c44c2fc48b7a7668a10_NeikiAnalytics.exe

  • Size

    888KB

  • MD5

    5e6eeb6c120d3c44c2fc48b7a7668a10

  • SHA1

    c0096bc358838f2127ccb74e34f6aa60471f6b4f

  • SHA256

    845a96167a50811c9a5d8fbbb84fc89ff8f4f94105bf5452955e881874ab6f91

  • SHA512

    02dccfb2bd04b420dbabfda0296c09a4cc7c49a13868119d06bd608b01ae291fdbf13c7d1a1f8b4ccaa23c554060d9f5db7549c64e87b785eb2b1c5cc740b5af

  • SSDEEP

    24576:gMqFDJkxqo4AfF3Bt/sBlDqgZQd6XKtiMJYiPUD:6Mqbs/snji6attJM

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5e6eeb6c120d3c44c2fc48b7a7668a10_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\5e6eeb6c120d3c44c2fc48b7a7668a10_NeikiAnalytics.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:1916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1916-0-0x0000000000400000-0x00000000004E5000-memory.dmp

    Filesize

    916KB

  • memory/1916-6-0x00000000022A0000-0x0000000002307000-memory.dmp

    Filesize

    412KB

  • memory/1916-1-0x00000000022A0000-0x0000000002307000-memory.dmp

    Filesize

    412KB

  • memory/1916-11-0x0000000000400000-0x00000000004E5000-memory.dmp

    Filesize

    916KB