Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
17/05/2024, 03:40
General
-
Target
9bf58aacf98e45793bc86b9f17c50bc0_NeikiAnalytics.exe
-
Size
586KB
-
MD5
9bf58aacf98e45793bc86b9f17c50bc0
-
SHA1
b58102042fa864e7a436ed02627299acc9257beb
-
SHA256
56fee759850748db989cb83993f61b54adeaf72ae1833d7ebca3d70b1236d781
-
SHA512
f4680bc94326f701b47a8de7cbe6e720d42616a9704b1bbc29077a5d1d14d54b14ef76e508edb2859af9f38e6bb016a1aafeaa083b0c53646a3ce093d38d4a49
-
SSDEEP
12288:5plrVbDdQaqdS/ofraFErH8uB2Wm0gXsNr5FU:7xRQ+Fucuvm0os
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9bf58aacf98e45793bc86b9f17c50bc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9bf58aacf98e45793bc86b9f17c50bc0_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\components\existing.exe"C:\Program Files\components\existing.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
586KB
MD5783291d81b2bd8a696e0c10ffb669e28
SHA1d3679e6bf8fe32234b6576f27b964d2f38aee484
SHA2561367db9b5b777352628d37529856da9820e23f490f49bbfa1666d78a7ae1de37
SHA512c5d94e409d674d62d519103d09bf3eb1f972279bec16a982db663aaea5ba827155a9f5f1adc166c2d069c2a663ceaa53de1358feb3370514788d69c53ea5e381
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB