Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
12/05/2024, 05:56
General
-
Target
73b1a48e46feb2a7befd741ec0ad7170_NeikiAnalytics.exe
-
Size
202KB
-
MD5
73b1a48e46feb2a7befd741ec0ad7170
-
SHA1
d9c58b77d8297650b859869c4bf5b562b95dbbd2
-
SHA256
2de584a70c271172e2e84bfe9ff212782881f9a9c16c493250537c34be4494d1
-
SHA512
975509fa87b6f2d71df334cd9775ad7e4e0e4d119d651f9e29c19d8306d9d50633fa24d9b1f062ae3f44af5b321734a59a0fb4acade7da3c2f8f1844c76f2e92
-
SSDEEP
3072:1DnQIhJ+P/ol0Vp26H37avbiwt6jilTNj0BLeiKLX/P8Gck5q4jVeHpio5O2y3y1:lQIagQx6AipNj0VBmX55q5QB26bCrP
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\73b1a48e46feb2a7befd741ec0ad7170_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\73b1a48e46feb2a7befd741ec0ad7170_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\73b1a48e46feb2a7befd741ec0ad7170_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\73b1a48e46feb2a7befd741ec0ad7170_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
202KB
MD5c924df786f5c0617f1de119790a386c2
SHA12d971354a408297320e5596760b9f26b980d0872
SHA256827fc5dc305c3b71999ffca05e47b55010f7c7c8c55d079529dae0144ed6b5a5
SHA5122e1d090a90dc66389caed2ff9566a938e1afff0e6e10d01043821890de7834b61c2283983bb14d27eb3f893b5dd3e6d4c41267603204c4b923dfcf738196ab54
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
104KB
-
Filesize
248KB
-
Filesize
248KB