Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
09-05-2024 15:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6cfea0e201c5c9c811245bcd0ec71f60_NeikiAnalytics.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6cfea0e201c5c9c811245bcd0ec71f60_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
6cfea0e201c5c9c811245bcd0ec71f60_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
6cfea0e201c5c9c811245bcd0ec71f60
-
SHA1
b94058e141c541f8892212045d5b64d0355f06c9
-
SHA256
cbbee86f7bb3623a1d9e57326d8b1355bfce0c080f4f136df8b5406cfe32f32b
-
SHA512
5e9f235dcf5b24a224f6f1e8134cb28b03c7094573d81ae1550da48bb1b8d134fff10124b3dcb8c05cce77b8e8aff0b743bf09099e90016cf1f8b7e2422c35ea
-
SSDEEP
24576:DSQwhs8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:DSnhsgDUYmvFur31yAipQCtXxc0H
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 6cfea0e201c5c9c811245bcd0ec71f60_NeikiAnalytics.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2240 6cfea0e201c5c9c811245bcd0ec71f60_NeikiAnalytics.exe