Analysis

  • max time kernel
    120s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/05/2024, 14:56

General

  • Target

    bc4b7306895b4eda7148bc3c4df70d50_NeikiAnalytics.exe

  • Size

    2.4MB

  • MD5

    bc4b7306895b4eda7148bc3c4df70d50

  • SHA1

    8e3484ea6fbdd289fcddd52b7c80c55d616f3df9

  • SHA256

    544faa6124b83a9dd9c99c9d6e8f501f5f92f2e799e39beed62d025eb20be012

  • SHA512

    fec6468701f9fbde07da49fce806cc0105b351091904eebdaad48b5b51c7d71640bd52e50de7c354d383d69c859487e31540fa08d913d6993daa72faec589aca

  • SSDEEP

    24576:sAhW2OqVGkM2k4/MJIkG1A/Nyt8qfQR+2CSrAGNAs1JKc08QjVJMrFtWnnNoVJ:5JvN7UJBJNyebNrr1KqS+WiL

Score
10/10

Malware Config

Signatures

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

  • Downloads MZ/PE file

Processes

  • C:\Users\Admin\AppData\Local\Temp\bc4b7306895b4eda7148bc3c4df70d50_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\bc4b7306895b4eda7148bc3c4df70d50_NeikiAnalytics.exe"
    1⤵
      PID:5028

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/5028-0-0x0000000000400000-0x0000000001464000-memory.dmp

            Filesize

            16.4MB

          • memory/5028-2-0x0000000000400000-0x0000000000443000-memory.dmp

            Filesize

            268KB

          • memory/5028-1-0x0000000000400000-0x0000000001464000-memory.dmp

            Filesize

            16.4MB

          • memory/5028-9-0x0000000000400000-0x0000000000443000-memory.dmp

            Filesize

            268KB

          • memory/5028-8-0x0000000000400000-0x0000000001464000-memory.dmp

            Filesize

            16.4MB