Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
13/05/2024, 18:08
General
-
Target
c09adae92c6df9692c825f489176dce0_NeikiAnalytics.exe
-
Size
92KB
-
MD5
c09adae92c6df9692c825f489176dce0
-
SHA1
35f144aaec48f61186997ed41df6930695941ede
-
SHA256
fad23288039db9cf575903623eed8d5c2fb5ac158d00edaffce98e2d32da5542
-
SHA512
77c4678cc71b944e048a3d645468fe6f0e5f33139cf5223b942bfd0d40535ff951e73081e2bae9c2bb41e726cc93ba1a99756c85ee39c26dbe59920cde9a411c
-
SSDEEP
1536:SXav/+lfczUsMjnWXgCuvE411TYpvtpe/iCCDHdjf6OlrccZHGhdzrJPXYc+6ms+:Sqv/NzUsAnWXBmE411Wtg/iCGH5iQZoS
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c09adae92c6df9692c825f489176dce0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c09adae92c6df9692c825f489176dce0_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\c09adae92c6df9692c825f489176dce0_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\c09adae92c6df9692c825f489176dce0_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
92KB
MD591a8f89c2048f4c012546ab14108c05e
SHA10251895eced088983ef7fbae23e9267c91323fe9
SHA256c52d13898feeb66d030ff2194af6fe36de0a1ae52e8eb63a38210365781fa24e
SHA51269865170f99d37a334edb09f422e49aaf9a8130c3e75e71894da9147a0ac9073cfef072800f32a3f40f6e4c38eeaf4448de948a573460e7dbfcfc5514b8ad72f
-
Filesize
196KB
-
Filesize
108KB
-
Filesize
196KB
-
Filesize
196KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
196KB
-
Filesize
56KB