Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
20-05-2024 08:03
General
-
Target
d9c95677dd2fc3dc93263e4480aa8450_NeikiAnalytics.exe
-
Size
189KB
-
MD5
d9c95677dd2fc3dc93263e4480aa8450
-
SHA1
7fc4a3ffe22dad1ba98967eb438c535361c33c7b
-
SHA256
215e40f021e34ad71b17e2832420e97c2fefeefcd7b17d63427ef0b919c49006
-
SHA512
abc789642a92de9901676898e653c13f1b1ccb3c60d000a0df8f4666bc79f9220d7a79f8ca1482e5f7d9d2db940876e36b6c184728f7a2b792cd642a3baae1f0
-
SSDEEP
3072:v1da9s9byJPKmanuNW7TRmbiTRt1XYlaBiP7FxRAbdBafVobjn5FI3GmCKqxtKka:Nda25PmanuNg3XYlaYAbdBafVobj5FIL
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d9c95677dd2fc3dc93263e4480aa8450_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d9c95677dd2fc3dc93263e4480aa8450_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\d9c95677dd2fc3dc93263e4480aa8450_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\d9c95677dd2fc3dc93263e4480aa8450_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
189KB
MD549a718cd37e75b736f76e61afeb79404
SHA176e69a5e542a1e50b43bf53f8308c9d4e8d5aff0
SHA256310dc225090a206b849455a3d7c2cbe9bff19922292c7f877d29cfe46b826f16
SHA51295d7528efbfbaaa399d24e3e3855952d29fc2148038961d728572c3460751316d77d254aa8a248baf28e7da3f899b40f4cf8aff10384f1adbd988a70a720ea8b
-
Filesize
84KB
-
Filesize
240KB
-
Filesize
240KB
-
Filesize
240KB