Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 15:34

General

  • Target

    e3823c36482d347a680c1c8f26a67750_NeikiAnalytics.exe

  • Size

    149KB

  • MD5

    e3823c36482d347a680c1c8f26a67750

  • SHA1

    6bbaef7e9919a89bf5254c2f7cdc5e8925f99d7c

  • SHA256

    d886b066da483e85bd1cf7fbc05e3a63e4e462995f35b9cde0b895f2b8d64beb

  • SHA512

    c04f71663cdb6ba41508231834892317838a9888d4dfdea0e21c074ef88ddf3f2eacce142ce4762c274657e22293a6e30e447cdc074d6b98bd8571ef93d6d5ac

  • SSDEEP

    3072:A/2WCNGOBhIc38Pr/7hNsKQyMnKlePEogfTP6qE22Y7Fy7tFmL1:A/2WaGOBhZi/7h2xRCePEoYTPVEZYRyQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e3823c36482d347a680c1c8f26a67750_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\e3823c36482d347a680c1c8f26a67750_NeikiAnalytics.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1808-0-0x0000000000020000-0x0000000000029000-memory.dmp

    Filesize

    36KB

  • memory/1808-1-0x000007FEFB470000-0x000007FEFB480000-memory.dmp

    Filesize

    64KB

  • memory/1808-2-0x0000000140000000-0x000000014002A000-memory.dmp

    Filesize

    168KB