Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 13:29

General

  • Target

    55d90cdaf89e43f4d57f55792e30d7fbde479fc7547610b3f5d413ef8fecbef7_NeikiAnalytics.exe

  • Size

    985KB

  • MD5

    b19331796b7d84953289c452f73c7900

  • SHA1

    125d4ae7c50ab138bf1c1bef8a7ba15c635ecd4f

  • SHA256

    55d90cdaf89e43f4d57f55792e30d7fbde479fc7547610b3f5d413ef8fecbef7

  • SHA512

    75d372de2aef82fc5b77008b28736bef116ec7090fc202d2be8a367d7a7d480ce63db4867abc422d8790625807c45e20872f85caad54767e7691ea83d66d1497

  • SSDEEP

    12288:DUtNL8YcL7YHaI7XHgZQKhJgeCmdZPU6DQPHPcJrX+YIyjSIHpVXiV8Ih8Sv/uDY:IbL88HFLHgZpJEOlDmKBJfJVSVTLgBe

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\55d90cdaf89e43f4d57f55792e30d7fbde479fc7547610b3f5d413ef8fecbef7_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\55d90cdaf89e43f4d57f55792e30d7fbde479fc7547610b3f5d413ef8fecbef7_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1340-0-0x0000000030000000-0x00000000300FE000-memory.dmp

    Filesize

    1016KB

  • memory/1340-1-0x0000000000590000-0x00000000005F7000-memory.dmp

    Filesize

    412KB

  • memory/1340-6-0x0000000000590000-0x00000000005F7000-memory.dmp

    Filesize

    412KB

  • memory/1340-11-0x0000000030000000-0x00000000300FE000-memory.dmp

    Filesize

    1016KB