Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
16/05/2024, 17:30
General
-
Target
00a218c2e17e7200e5bc9c1600a397b0_NeikiAnalytics.exe
-
Size
216KB
-
MD5
00a218c2e17e7200e5bc9c1600a397b0
-
SHA1
11ee84bc8cec334be724c0d103e4774f139b447f
-
SHA256
3101a46f4ea393c5ef6b59651963a983d5524f3dfd2aca9195ac1b1ed1b05453
-
SHA512
0ca89f8d427caabd181528477537b8f967d0a3ffcccbbc868d6f38c613b7ad492cb7af564bc2d1d793a7f1a5093503eae4e3c25f6e03a120935a0a875c3c759d
-
SSDEEP
3072:sq6VVyy5Gq9QikHJ7N8q46bUHDnloEE8ecndPzV/8N8ssm6Z9i+GpuH+jr3GYVWV:sJVBG4IpN8q4Dl1xndPxJsoZWP3G6WB3
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\00a218c2e17e7200e5bc9c1600a397b0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\00a218c2e17e7200e5bc9c1600a397b0_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\00a218c2e17e7200e5bc9c1600a397b0_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\00a218c2e17e7200e5bc9c1600a397b0_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
216KB
MD5164a9763763ff195f9302c2ce67173a3
SHA1f5e4a484e817140549d32753ab26cb151bf3e56a
SHA256e85c388251133562cfe050eb8a0e4f5c82a5d8875c12a495fda555dde0e0b438
SHA5122b8908a04932d9ecacc55c3f87d0d81f371680ef45f672699bc9896eabe9e612f813f2b59e4892d73509a2afd29e6626168cccd36edf23c0385445c817cb2bd5
-
Filesize
252KB
-
Filesize
104KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB