Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
22-05-2024 21:47
General
-
Target
44086e4adf9e0cd42cf16dff922d3670_NeikiAnalytics.exe
-
Size
256KB
-
MD5
44086e4adf9e0cd42cf16dff922d3670
-
SHA1
48f6dde0e192e0f1a67e8e03ab3bec5eeb136336
-
SHA256
14891b38d40bd36b869dca1bb530326fec9e9b84b9537da100519c597bccf1e8
-
SHA512
66d64dcb58b2aa93627f2c0b39f0f7dfbec4ac7d72134be76b00707d5d2f73878e54d6f7cb98d0b0f1891d0a339c06e5b2889610afb2f6b861f6caa5c118ddc4
-
SSDEEP
6144:h41EqPKughc0TtGLczjsvlMB9Ng9mf4meMm5+2k/JrAV400:h41quW4csyTg64meMm5+2qJrAVw
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\44086e4adf9e0cd42cf16dff922d3670_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\44086e4adf9e0cd42cf16dff922d3670_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\44086e4adf9e0cd42cf16dff922d3670_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\44086e4adf9e0cd42cf16dff922d3670_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
256KB
MD5ac9e049c14c9e604aa2774c3592d3468
SHA1f27859abc06773d2e5857d895daf735a23236959
SHA2565bffafb76395299d23e33c63013567d4c8a3f5702b0d4314142955dc1d789cfc
SHA512b20357e306cc6166e38100a67b73bc7aa3d1a8c0b456117c9e900d32a6079b5b3f49fff383efcd46daffb9af3500e8442b3a4c7ccb9fc6a89548d916078e0748
-
Filesize
268KB
-
Filesize
268KB
-
Filesize
268KB
-
Filesize
268KB
-
Filesize
104KB
-
Filesize
268KB
-
Filesize
268KB