Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
13/05/2024, 22:16
General
-
Target
27eafecf7556955b8c57a42f85e65020_NeikiAnalytics.exe
-
Size
448KB
-
MD5
27eafecf7556955b8c57a42f85e65020
-
SHA1
1caa8840056b3022d57e07baf38d25b02c18c2b6
-
SHA256
aa9d389a2a94fb184f8e31cc74342ebde2a717ba7e4c156019ce2838635f5568
-
SHA512
8c98bed8bd26e2912b1a10e4fa5d6f100edc5284960fd1f7a2563f02432ecd44705a62cd09ceff90999d44d90874089ff19726867fe4cdc57d209d43a8a6e29f
-
SSDEEP
6144:uMTiZ2d2vtif5pxrlD36LLNIDEqZK0W7cyqCxSngmMBqfycuPbUl0i5cD5J6K1mi:uMTP/TNlLSwEqZQ0npM4dl0v5JdmY
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\27eafecf7556955b8c57a42f85e65020_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\27eafecf7556955b8c57a42f85e65020_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\27eafecf7556955b8c57a42f85e65020_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\27eafecf7556955b8c57a42f85e65020_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
448KB
MD533b2af024a16aeef347772888f931f03
SHA12c774d11dad00a2f625ed871d370b6b20c771099
SHA2565450fe16785194ca5201792a64663ccc2dafb8e7b63f2bf8505d9a9a95147d36
SHA5120c7472849f777cca4dd31e0d6d8cf87083e23cdc92446ca9a20bd3d2b271f0b5ceab37c22d6c1655b25c04ff9ef3ed2e77126cd0ac8dcf73062507f8dc5e2ec0
-
Filesize
224KB
-
Filesize
224KB
-
Filesize
224KB
-
Filesize
224KB
-
Filesize
84KB
-
Filesize
224KB