Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 17:57

General

  • Target

    055bdd297b4231a3d6efb5f0930c3400_NeikiAnalytics.exe

  • Size

    3.9MB

  • MD5

    055bdd297b4231a3d6efb5f0930c3400

  • SHA1

    64134995c80d7fcc954e7b70ae3d7ccc9f6f8bd3

  • SHA256

    3a2410333ed9946a8ce4ed9b0d7dc00b1743be1dcec43935b2db499bde3369c4

  • SHA512

    7808145a4ea2d75493c56599320b2cf9c21393baab5086353acd640d37ff6e73712101470e8befbaeb3190b2a538e09b179074a0d2880d0dfac5fa8aebcfc1ba

  • SSDEEP

    49152:4adpFcx1nkQoqvUbvgXELEnAR0gXV/XB+7nZE1GhnuFnNeNMWo8CWgiV5omI05ID:7Fcxeecao3yudFnN0DHIeYNdX0Q

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\055bdd297b4231a3d6efb5f0930c3400_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\055bdd297b4231a3d6efb5f0930c3400_NeikiAnalytics.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2704-0-0x0000000001B90000-0x0000000001BF0000-memory.dmp

    Filesize

    384KB

  • memory/2704-7-0x0000000001B90000-0x0000000001BF0000-memory.dmp

    Filesize

    384KB

  • memory/2704-9-0x0000000100313000-0x000000010031D000-memory.dmp

    Filesize

    40KB

  • memory/2704-13-0x0000000001B90000-0x0000000001BF0000-memory.dmp

    Filesize

    384KB

  • memory/2704-8-0x0000000100000000-0x00000001003EE000-memory.dmp

    Filesize

    3.9MB

  • memory/2704-15-0x0000000100000000-0x00000001003EE000-memory.dmp

    Filesize

    3.9MB

  • memory/2704-11-0x0000000100000000-0x00000001003EE000-memory.dmp

    Filesize

    3.9MB