Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15-05-2024 05:28
Static task
static1
Behavioral task
behavioral1
Sample
89d5ba10fffeb7a97a6e98aca2a22e70_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
89d5ba10fffeb7a97a6e98aca2a22e70_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
89d5ba10fffeb7a97a6e98aca2a22e70_NeikiAnalytics.exe
-
Size
74KB
-
MD5
89d5ba10fffeb7a97a6e98aca2a22e70
-
SHA1
ce91dc72284e833e82cdb28ca416807f52af362d
-
SHA256
153b412f5bb76238cdcdddc57be32e5223f4ec8304b2d07b76787f5db4d6a46b
-
SHA512
fbb4d851ec994bc42b32450decb9f43f770945688ad0ee71b84f0d4b149b0cf8dd1e3b14c9500bb2270b7e4109d377762232ee4c6b3bb830b61d74eb2a0aa9e8
-
SSDEEP
1536:1h3YrzjzGabh9X0PCig8Hf7j6iQ3e7Orgj:jizj7bhtMC98/7pIe73
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2356 eclacar-oudur.exe -
Loads dropped DLL 1 IoCs
pid Process 2752 89d5ba10fffeb7a97a6e98aca2a22e70_NeikiAnalytics.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\eclacar-oudur.exe 89d5ba10fffeb7a97a6e98aca2a22e70_NeikiAnalytics.exe File opened for modification C:\Windows\SysWOW64\eclacar-oudur.exe 89d5ba10fffeb7a97a6e98aca2a22e70_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\89d5ba10fffeb7a97a6e98aca2a22e70_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\89d5ba10fffeb7a97a6e98aca2a22e70_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2752 -
C:\Windows\SysWOW64\eclacar-oudur.exe"C:\Windows\SysWOW64\eclacar-oudur.exe"2⤵
- Executes dropped EXE
PID:2356
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
71KB
MD5866cca642013f42a06f990d2bdc323da
SHA1b7316fd3200ae7bad24258cf9652f0f8f0af97e3
SHA25681681ab3e167381e78438566ee8f8604e8897d68d4f078cfb4a025873bb2a03b
SHA512fb94533476eb77f94b9da0a20efd30417e750dba6cc09129e8a3e33f45bdf6327f82d07f9acb89f4ebe75ef6380aee67a42a56401a5b85d99a5545f4d9d88487