Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
10/05/2024, 12:44
General
-
Target
e432976fcf540a8181bfc0c907210450_NeikiAnalytics.exe
-
Size
203KB
-
MD5
e432976fcf540a8181bfc0c907210450
-
SHA1
f234fb9e29ec60d1fbccd2d0d0f1c505bb8394fa
-
SHA256
9bc841b62c909ad0ef7e1c416f643b02bb40571f7ff3a2057816485abe307a46
-
SHA512
832a71280e3497dc39a1d03b024a6a96eccf072689684f9ba5948b70aa923d7af67c8d27902569273665d7906f8c2528a5dfe340afd699ac4e6c3fe0f1988f11
-
SSDEEP
3072:hek4Ne/PBUKBmXkKKrfLBdUxbTELRBXHm4q+8AdDCXvdynIm5CdYGXgUB72t:Mk4yUFkpfLLMbTEtP8lXvdyuqG1B78
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e432976fcf540a8181bfc0c907210450_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\e432976fcf540a8181bfc0c907210450_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\e432976fcf540a8181bfc0c907210450_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\e432976fcf540a8181bfc0c907210450_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
203KB
MD5af2ea737983fa35cddb5409130508992
SHA1d4229e08a483354f8f979b3914e53ace6d79fa6d
SHA256f2c3454c452f57c410af1d65e8e7985bc1d08ff81cf9140465738f9020949ab7
SHA5121b331664273166925470b3d215f3975edc23c2c22f5bda311945ff3c58769a6ef330cf8d78f4b124369b4b1b9b85cc11b2615fafd589bd1f6a4e5b5d6951a341
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
104KB
-
Filesize
252KB