Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
11/05/2024, 03:25
General
-
Target
6c1757a93fdbfe7db3c6070db71fbb00_NeikiAnalytics.exe
-
Size
213KB
-
MD5
6c1757a93fdbfe7db3c6070db71fbb00
-
SHA1
5e2d8bc237b014863b4af4cba05adb8797cdf5c9
-
SHA256
7de7a6cd14e1ff25db4d9c4407c52d3a87ed8fd7ad0260cbe5c198595a9e72f7
-
SHA512
d75f0d61fb36529f5608d7e3aaafdbd78f0186bc3868e7c6803b2ba64d6912a6206f97033ff57e602f3f76567f2b7bc107dc3c6042c3e4fff5890b35d04f031b
-
SSDEEP
6144:jjm/aXSq3vnP6nVAn++Y5owG1QtKFZwsLt+GECuFNTgS7tDH0:jCYvnP6nin+viJatAjVE9FlJDH0
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6c1757a93fdbfe7db3c6070db71fbb00_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6c1757a93fdbfe7db3c6070db71fbb00_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\6c1757a93fdbfe7db3c6070db71fbb00_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\6c1757a93fdbfe7db3c6070db71fbb00_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
213KB
MD5380b7dcf180a74642b6745fe9215b0dd
SHA1482722a8286a875dbf485f871924e3b71433b24a
SHA256e9bd8e408154fa79fe19dbab341deb23e95aa881d63c28e819cfdf5371676d52
SHA5121c34298afcebe2fbd6b41b99dae85334bc284ed8e15b9225d0d7b8a213c1eed621e3ecbfd9579c0be4299cf3a5c90bb83ed168fc57e4d4d4dfc8ea55c4071a6b
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
104KB
-
Filesize
260KB