6b3f64c1b69c104a4098cba52973d44767d19fce51611f59cfd12877cf19ae2d

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
09/05/2024, 17:56

Target

b3ddb5216a25f0c0a65cabd4f9efa240_NeikiAnalytics.exe
Size

1.7MB
MD5

b3ddb5216a25f0c0a65cabd4f9efa240
SHA1

fa769c12535068f39f3a28475501bc0792e7e023
SHA256

6b3f64c1b69c104a4098cba52973d44767d19fce51611f59cfd12877cf19ae2d
SHA512

05c7ac3ec4b73ff51caf9c77dc592fb505e71b4c327535a2c38d4170145eb2e5c6160493b7c6a677a3fb999fd612f7d4c893d7d891a37b9e60ff2be318c7bc1b
SSDEEP

12288:vzePADFjZ7EcrWDoDQNRkHM/abog7s/WqHRl3d9p03M3KOrmw:beP6jZ713DQNo/sms/nl3FgYKOr

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2236	b3ddb5216a25f0c0a65cabd4f9efa240_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\b3ddb5216a25f0c0a65cabd4f9efa240_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\b3ddb5216a25f0c0a65cabd4f9efa240_NeikiAnalytics.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2236

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact