Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16-05-2024 23:43
General
-
Target
5af764c85f71fce63423a778d7f16520_NeikiAnalytics.exe
-
Size
205KB
-
MD5
5af764c85f71fce63423a778d7f16520
-
SHA1
71bbc94232cb211e643e553dd6e29cd228c10264
-
SHA256
e406369a5f04fc538b8e0eee5a39528743e7302e38f0b0d676c9e31b7f8db012
-
SHA512
8185a3e8c07c436b5d366923464284c4b07658faec4f5f0f104d5b3ccd9edbd108d12a7ae1bf1fcc1a2e90bb9979ac14c6c9daddc48b2d888301c89d8378084a
-
SSDEEP
6144:fuFEsBvYCU/yG3D+i+AbKzLxRa78Gh8Bc9ifp79W:fqp6yG3DGA+vxRa78Gh8Bc9iB74
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5af764c85f71fce63423a778d7f16520_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5af764c85f71fce63423a778d7f16520_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\5af764c85f71fce63423a778d7f16520_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\5af764c85f71fce63423a778d7f16520_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
205KB
MD5ac4b803860fa59011b06470686bcc2d8
SHA1e3ef11e6bd94b2d964a1f1ab10eccdf070f4cb85
SHA256efe9a21488b54ec314cb75bc56d3ecf6ad84fff21acbfe3e4e75d3f193091f04
SHA512a125c646f9904826d5d28b9d167cedfdfada1e921ebd5dfd2959c0c66d176d5711330ea8799ad242487b55516050e6bf936f716e4522d4a90eea8963586d83b5
-
Filesize
260KB
-
Filesize
84KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB