Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
22-05-2024 22:23
General
-
Target
4b0f82056e09b6875b8d6195b2808a20_NeikiAnalytics.exe
-
Size
3.5MB
-
MD5
4b0f82056e09b6875b8d6195b2808a20
-
SHA1
46b5679b02b66c43a73300f8c74f1181716064d7
-
SHA256
8bc6f3ea946eb094a8468879e0507f8d3a084b2d05fd5ea0e5b1470ae866fb0f
-
SHA512
bcc9854eccb0f4cbdb3331c8e8018e671188da9c08ec127c2878295239ab4f8daa44920497a80c187d178c05b7f60dc1fddd130fdae17e0c773c83172a9506f5
-
SSDEEP
98304:llAzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz+:lazzzzzzzzzzzzzzzzzzzzzzzzzzzzzG
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Drops file in System32 directory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4b0f82056e09b6875b8d6195b2808a20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\4b0f82056e09b6875b8d6195b2808a20_NeikiAnalytics.exe"1⤵
- Drops file in System32 directory
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.9MB
MD565a5e51561bae6b61e4d697ffecdd946
SHA194cd266d35d47b6c12778743c389c6a639f6cd7e
SHA25655465b976c7b35542bf3dc09f90908aca472fd67714b029c210ed3ccb81a1e04
SHA512ef6b3b67545c4008e4e06c073f40e75997566bdeee0ac0f4c75e0ef1ab4d69a0cb4877f731822dc410674c2bf17e8afc9b412faf1c28a38abf49cdfb3ae41534
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
20KB
-
Filesize
168KB