Analysis
-
max time kernel
149s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
15-05-2024 20:05
General
-
Target
28044d9ddcca4c99b887d3af019dcb20_NeikiAnalytics.exe
-
Size
2.7MB
-
MD5
28044d9ddcca4c99b887d3af019dcb20
-
SHA1
25191bae37815e797b9d35f01a5ac7ed8d43235a
-
SHA256
74b548dd0d1484609f4d9dfda256d350bb17e210136e1a3032cabc34d1d4247f
-
SHA512
54b7c3dbac33ae5aad23acee34a4ded385006cfeddc83993473b77c5e2eabba3b1330c1d8d1095249a8cf785e046fa9e3867fafa021d93864686737a75b7319c
-
SSDEEP
49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBw9w4Sx:+R0pI/IQlUoMPdmpSpy4
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Adds Run key to start application 2 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\28044d9ddcca4c99b887d3af019dcb20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\28044d9ddcca4c99b887d3af019dcb20_NeikiAnalytics.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\AdobeWE\xdobsys.exeC:\AdobeWE\xdobsys.exe2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.7MB
MD5a3608a54ffd33a0cc07e5b533c0e8679
SHA127b7c824a241e9443ddab8bf0c58919d452574c3
SHA2563a8e60735450ad423670088b36c11e41e57d9bd3e4440070c660794400fde6c1
SHA512f7d0ae7cf97ef00b66aadebc52d32ac2be72fadefe263190458d18183afaf8c317a8fd44042cd1e9bb9c98a0cb885b0e33353f4c4f70ef1eafed2798359e6fae
-
Filesize
2.7MB
MD592ef6e1e4461feeea5c136a016d554c0
SHA13487126273ae5853024005322a8035a650592d74
SHA256676f422ab5da1267755443ceeaac797563288ea752ee3c833caece3e0199ae14
SHA5122f34415894150408074e497f27e19ae0aed4131c4ade5eb2f4b4d733a4e86dd8cd0ef99f5c37aed001014c253890698b3a61a0ec7d0d96c6cc4cf124f5f86662
-
Filesize
202B
MD541143004043455d590bcc7137bf56ff8
SHA146e3a4f419a981588188f12ba23e2080a91f480d
SHA2563bcc4d9a7917d497052e095432eb2c02f81943b8d63bca2b25080397e689fbef
SHA51261b2540f7cad9196633ad6ffa60360c77816059659d64ce47c1e626cffe45ed9f164de4cf24ce8fca51353a412621a046f66a2368166e281f7c0f72c978c9195