Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
10-05-2024 22:03
General
-
Target
13aeaea72497fb3fb6e4ed5d0d5360e0_NeikiAnalytics.exe
-
Size
384KB
-
MD5
13aeaea72497fb3fb6e4ed5d0d5360e0
-
SHA1
61c2ca917ff2c7e3ae2975c8369b8c44d79157af
-
SHA256
f419e15737941e40d44fb295e347a3b2cf2bf19f1e19bfbfb75bdb665410ef04
-
SHA512
786b2d82083e1befa102b8caf86e52f9c159784a969e7734e23d4ab27bfbc9b6c91caf56236502f49897aef21863425aec678949a2d20be2b9e75f039100a1f4
-
SSDEEP
6144:TM18wTJpYkYCZ+c71v1BWBdPNXKPdWsZ20W7cyqCxSngmMBqfycuPbUl0i5cD5J:TM1lrYkrBWBdPJKPEgk0npM4dl0v5J
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\13aeaea72497fb3fb6e4ed5d0d5360e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\13aeaea72497fb3fb6e4ed5d0d5360e0_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\13aeaea72497fb3fb6e4ed5d0d5360e0_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\13aeaea72497fb3fb6e4ed5d0d5360e0_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
MD569c25bcb66b11d52d221657648a26cd5
SHA18f0620df55fe460bc18afdaf3bbc21668e431982
SHA2561ddabf46397c787bbaa585eca3ec8f0b6855bf546eb60dfcedd67b90c055d088
SHA512ed216f4e7456ed4d710a6d9dd33e824ef1ed683a407ec0dc76577c4d09c71173c09a77ebc55ce822cef2ddcf16fd2fdd94edce8594901f26953a57e21350b0e9
-
Filesize
248KB
-
Filesize
84KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB