Analysis
-
max time kernel
141s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
11-05-2024 05:53
General
-
Target
8d3d306f847c77bf06101d746a052670_NeikiAnalytics.exe
-
Size
381KB
-
MD5
8d3d306f847c77bf06101d746a052670
-
SHA1
ddddf635465a50911cca99be92b455914615afd8
-
SHA256
aa5b49e9ac09f3c9daa610609589c8c1303851bf4fe09bf4577591cc267e186d
-
SHA512
aa4f3cb1300137af0f4fefe34f36e07e6b057b6110caef4c139a19059340e0061660a5f885ad3b720214efd74267f27126a325a3072c4b9543620c0fa936dc47
-
SSDEEP
6144:+BJk9av85lgrciUnEOqGRPW8ETxPLsYp:+XkEvEgrciUEOq0PEVL9p
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 35 IoCs
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 35 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8d3d306f847c77bf06101d746a052670_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8d3d306f847c77bf06101d746a052670_NeikiAnalytics.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
292KB
-
Filesize
280KB
-
Filesize
240KB
-
Filesize
232KB
-
Filesize
39.8MB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
1024KB
-
Filesize
292KB