Analysis
- max time kernel
150s - max time network
149s - platform
windows7_x64 - resource
win7-20240508-en - resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system - submitted
10/05/2024, 03:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
General
- Target 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe
- Size 154KB
- Sample240510-d6schsgf5x
- SHA256 b40db84db9d83fd6058f0e51c76791257403c9da4e0e3817edd9a3e258c0cb6e
- MD5 5f9d4455c5851bd41f2b372f104af900
- SHA1 347d502c6d42717325e381f413101cdb703af662
- SHA512 eedbe8260412147b7316ef9076cd5e4f3e31b30bad293ff3f2c1d57449ea93ada58c882b18da34dbb908158123dbc10e1817695df23d4e4b08979879c54792c6
- SSDEEP 768:Gow1DMVacm4IaFTbkbNOUfg7jHOGDxdoIF+rK0emFtRvrXt8kYyE6GW9Iu:G9D6atOjukMYhk7ikYyEHWv
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
njrat
Version
-
Hallaj PRO Rat [Fixed]
Botnet
-
aboood
C2
-
senouci.noip.me:81
Mutex
-
eb36ee02d7ed4e292568ba61507478f8
Attributes
-
reg_key
eb36ee02d7ed4e292568ba61507478f8
-
splitter
boolLove
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: 33 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe Token: SeIncBasePriorityPrivilege 2932 5f9d4455c5851bd41f2b372f104af900_NeikiAnalytics.exe