Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
15-05-2024 12:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe
-
Size
1.5MB
-
MD5
d1a86addb3b917fef1b150afd5266c40
-
SHA1
c915d3f3738a2bb1e22c15fc324d2adb5975b445
-
SHA256
26ee9723f791f940c02ce8143560da33bd5acb743c2e3cb6f9103c1b9cf75969
-
SHA512
46dfdf96f52fc3b0142df1ec24c645942a0dc56dc1a38d052503b4d53a4ea875d81e86863bfa2d38b6e648b3eaff5eb74c5528808e739977f430d42c17c63cdc
-
SSDEEP
24576:4DnkUF1K/fj1lzFHE6VUFZ3htnWB1PXi9U2Th48:4DkNkSIZxlyxiG2TD
Score
1/10
Malware Config
Signatures
-
Modifies registry class 12 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\LarrySoftware.MP.playlist\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe\" \"%1\"" d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\WOW6432Node\CLSID\{7F5DF65F-E929-4a5f-93CB-06A116FCC2B3} d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Set value (data) \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\WOW6432Node\CLSID\{7F5DF65F-E929-4a5f-93CB-06A116FCC2B3}\ = 9d89bbb29c86d0aa9db0ccb09ccdbeccce86ccb29d8699b299af94cace86cbca99b09dae9dafc8af9cbf9d9f9d9598cb9d86becf9b96bfabce86cbca9d8688ca9b959db19cb0bf9f9c968ccf9b968ccc9cbf99ae9db3bbd1ce86a79f9d96cbcb9d95c8b39bcc9d9f d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Set value (str) \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\LarrySoftware.MP.playlist\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe,1" d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Set value (str) \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\LarrySoftware.MP.playlist\ = "Playlist" d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\LarrySoftware.MP.playlist\DefaultIcon d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\LarrySoftware.MP.playlist\shell\open\command d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\LarrySoftware.MP.playlist\shell d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\LarrySoftware.MP.playlist\shell\open d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\.playlist d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Set value (str) \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\.playlist\ = "LarrySoftware.MP.playlist" d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\LarrySoftware.MP.playlist d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 4980 d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe 4980 d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe 4980 d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe 4980 d1a86addb3b917fef1b150afd5266c40_NeikiAnalytics.exe