Analysis
-
max time kernel
92s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
10-05-2024 03:57
General
-
Target
65198ea267a3b00dfdfc5d8d9baa3200_NeikiAnalytics.exe
-
Size
1.2MB
-
MD5
65198ea267a3b00dfdfc5d8d9baa3200
-
SHA1
65ab1cacf332de3eaaef7efa1f1fc60be5eb60b5
-
SHA256
f9f67f3d54e974f4f256dd6c8a982f738f8b29f771f4a75f8ffb6299cfa62f44
-
SHA512
9066dd7179db53f487f91da28291426e31d7da8d4e3a47297644afb2647429310fb1afd2fe996c453a824ad95d84d846f1acd9677e8a2bf3c0d1b7f128c5ffdd
-
SSDEEP
24576:sDKnxYaXJi2Y3MpbwnCvzb4cbmYdTyVDUT9+eaewsAjgv5:sDkYOMwwnMb4PmyV4AljK
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65198ea267a3b00dfdfc5d8d9baa3200_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\65198ea267a3b00dfdfc5d8d9baa3200_NeikiAnalytics.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage