Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
17/05/2024, 00:22
General
-
Target
65027965845506de669887a8d66eda40_NeikiAnalytics.exe
-
Size
7.8MB
-
MD5
65027965845506de669887a8d66eda40
-
SHA1
87e1426d62183c022668a9db495ef13d19afa1d2
-
SHA256
6db3301ec246cc9012ee6ecb56d6e8dfd97b1f9a27c0528ca2ffb02eea7089f8
-
SHA512
4afd103045d2c86dc74dae2517574839bb0419999df9b3d32973bb84175475e06ca03e3af3560f9ff510754a7cb9de9fa4866508643083e9544151fd9405adc6
-
SSDEEP
98304:emhd1Urye2o0eLNgnKbnV7wQqZUha5jtSyZIUb:elWyhn2QbaZtli
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65027965845506de669887a8d66eda40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\65027965845506de669887a8d66eda40_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\FC9.tmp"C:\Users\Admin\AppData\Local\Temp\FC9.tmp" --splashC:\Users\Admin\AppData\Local\Temp\65027965845506de669887a8d66eda40_NeikiAnalytics.exe 2D6658D7F4E4980F308BE7D077FD258655AA5D3516E635D7343D68B12AEF53CAC21FC618AADF52B9710CC4CF69C1DA020317123B7154AA78AE4A4E9BF267C1B82⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.8MB
MD503727816c05e4083b3e6003cfff7e34a
SHA1091e780e4591b0dd6c2f2fbc37335ad52c5a827b
SHA256483ac2a621de5957c5b180b6ee753f5693a2cb73dc32ee614e972f7014b198d3
SHA512db414645df10103d39fce21909d6f62962423be808b635353fa74b1c5a80aeccdd59a3f97a248745e38047c4fafa17c720ccc112fbd9d73e5160d117484699fe
-
Filesize
4.3MB
-
Filesize
4.3MB