Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
09-05-2024 15:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7ae4e793ae0a33ff832216bd3c1bc730_NeikiAnalytics.exe
Resource
win7-20240215-en
windows7-x64
2 signatures
150 seconds
General
-
Target
7ae4e793ae0a33ff832216bd3c1bc730_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
7ae4e793ae0a33ff832216bd3c1bc730
-
SHA1
3ad1f1489b4a3eb326e0672db7af498f789ca00e
-
SHA256
718ca10177bc8b8e0fecc68eb78674e3797ebfd0ced9ecbc7373169981aed092
-
SHA512
3ac9b6cf6fc8448b275415d54c0147a752e87327ff0311e2c41b51c9698ddf53b616207c949cc3eedda2c177ec955b6b8decb75006c938b6c18b5cf37caf6103
-
SSDEEP
24576:g+/QoiZMrCxuYigXe4i7ojhsP5Lgrk1TWb4AN5:RmMriuee30jaNf1TWbdz
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 7ae4e793ae0a33ff832216bd3c1bc730_NeikiAnalytics.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2008 7ae4e793ae0a33ff832216bd3c1bc730_NeikiAnalytics.exe