a221a4606e85cb4420580a1875d21a74c0e0a4a5950b5cf599533d772b25ac9e

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/05/2024, 01:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

783af155c495eb1a3fb3b8bffa527d40_NeikiAnalytics.exe
Size

274KB
MD5

783af155c495eb1a3fb3b8bffa527d40
SHA1

7b387b58889ba21b1ea8c5c18abb6f405f6ca80b
SHA256

a221a4606e85cb4420580a1875d21a74c0e0a4a5950b5cf599533d772b25ac9e
SHA512

c689d25f7645d9afc0b289529e2db38d58dd26de43558f6e5f4c48ff88bb74bf2928e9177d4026b608ef79131fb34d4330fde7021e57f19506438cb5b59a9117
SSDEEP

6144:LD+LVYIZ6pnnn7AdZsl/qUQ3sbSmnOPIYL6qMMfD9oL5cF9j+nnn2pm:fQGdAo9bZOcnMfJoLCFXm

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2340	783af155c495eb1a3fb3b8bffa527d40_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\783af155c495eb1a3fb3b8bffa527d40_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\783af155c495eb1a3fb3b8bffa527d40_NeikiAnalytics.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2340

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\aiw259404796.ico

Filesize
326B

MD5
3c4d084719ab4dcdd1bd11042e53efc4

SHA1
fd8c8a5c4c49cd4ecd6acd6327860e771bac0ab6

SHA256
3572a6302c3d316e713d4ac42fa66d0c0e3b91434654793b9d772fef76599d4c

SHA512
a8e463131f6b0e198b6aea80b24f3362bdb2a4d9d5350d80a7d7b6278eda716488b493895a6c5dfe4bcc201a8c4c18c0499eb492e53e25dcd78980d156b693e8

Download Submit