Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 15:04

General

  • Target

    d7c759a720ea9776afd55f8ac1e71810_NeikiAnalytics.exe

  • Size

    702KB

  • MD5

    d7c759a720ea9776afd55f8ac1e71810

  • SHA1

    0f2d2a2c381f20822560f5656af03feac98d6933

  • SHA256

    d7844df9a6a0de05eff29645bc8543e19576f48e2883c2a5accfa649aff7cf59

  • SHA512

    6334469712c74dc680db32a436a3f203e2661344e95b19dd3c87f29e1beb6fe353c3b1ef01815d4c00ddda182f651d62e82bb297b6d2825ab7c2f0157efa3418

  • SSDEEP

    12288:3SYFz/TPMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:PFjgSkQ/7Gb8NLEbeZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d7c759a720ea9776afd55f8ac1e71810_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\d7c759a720ea9776afd55f8ac1e71810_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1888-0-0x0000000000400000-0x00000000004B6000-memory.dmp

    Filesize

    728KB

  • memory/1888-8-0x0000000001D70000-0x0000000001DD6000-memory.dmp

    Filesize

    408KB

  • memory/1888-1-0x0000000001D70000-0x0000000001DD6000-memory.dmp

    Filesize

    408KB

  • memory/1888-11-0x0000000000400000-0x00000000004B6000-memory.dmp

    Filesize

    728KB