Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 03:50

General

  • Target

    62ef7b4eec3e60712247420e9ec260e0_NeikiAnalytics.exe

  • Size

    79KB

  • MD5

    62ef7b4eec3e60712247420e9ec260e0

  • SHA1

    0f6450de15078cc388585a3950e5d7e8026ce3ab

  • SHA256

    9ddc6077f243321e2ab3745af533630c12b1e70ade89d1eb85598def68430c81

  • SHA512

    896b2ed679bce2912164637da19b7256dcfdea12019edd1ca151d3ba3bf16afbfef12cfcada9b844aa881a9a17ca03ffc5b73060d2fd7e8fafc8a71688a5a1d2

  • SSDEEP

    1536:zv5F8+niQuWw7OQA8AkqUhMb2nuy5wgIP0CSJ+5y7B8GMGlZ5G:zvMEuWwqGdqU7uy5w9WMy7N5G

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\62ef7b4eec3e60712247420e9ec260e0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\62ef7b4eec3e60712247420e9ec260e0_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\[email protected]

    Filesize

    79KB

    MD5

    5060858c1df84dedcd602a01e0f185db

    SHA1

    6673c34ad5efb70959ec6ebcc524cf57d6cde575

    SHA256

    a92f5d9a3dc70e989790a4d577250db0f1b623b3ea5a5ab982c68df79a80db79

    SHA512

    1ca9e7b7e1fdb680605348b82e5d40f32a68f3e092421ed795722ec10568979a1a35f4438760cecabcb2251728b2d2e5211bd75cb9728a98b6b4e7ed917a6602

  • memory/2188-8-0x0000000000400000-0x000000000041B000-memory.dmp

    Filesize

    108KB

  • memory/2912-7-0x0000000000400000-0x000000000041B000-memory.dmp

    Filesize

    108KB