Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15/05/2024, 05:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
84656b5d88aca96aef09e11e7b49c800_NeikiAnalytics.exe
Resource
win7-20240508-en
2 signatures
150 seconds
General
-
Target
84656b5d88aca96aef09e11e7b49c800_NeikiAnalytics.exe
-
Size
626KB
-
MD5
84656b5d88aca96aef09e11e7b49c800
-
SHA1
17f6237ad82e127dbaad3ad745a95e14a3aa7501
-
SHA256
0e26ef786570ca6d9c91e498130ef3afe25c9052dcba6fbd16a354897abf11cd
-
SHA512
3ed62b948fe78564b7498f509624d0ef4509c3354056b3c05150b9d06e6f08fc8e8a481c5dc21edae88056b701c8582ea1394d41b838b9abcdfd5e77bdf6da80
-
SSDEEP
12288:dImdHq7TOyZ/sXu7E12toPrUFKUn3Ifj1yX1J2RXtn0GnqxgjS7xPRqsCurDxEmk:dndq7D/sX+E1suGD6yJGt0GqxB10sCfg
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 84656b5d88aca96aef09e11e7b49c800_NeikiAnalytics.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1648 84656b5d88aca96aef09e11e7b49c800_NeikiAnalytics.exe