Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 03:48
Static task
static1
Behavioral task
behavioral1
Sample
16da586a37207e722ce4a660a595ba90_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
16da586a37207e722ce4a660a595ba90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
16da586a37207e722ce4a660a595ba90_NeikiAnalytics.exe
-
Size
5.0MB
-
MD5
16da586a37207e722ce4a660a595ba90
-
SHA1
96c04ff47223570e03c0433dbd0f5dbe1e8b4f38
-
SHA256
1cba0802614014f30281f37eef31ef5a47ec4c8c43580c168d278833bf3ec8ba
-
SHA512
5d1ada67e7dad232af3f303cda0e6343c91b15abf8145b6aff947ced00ca315c7c315cda9d02e28eb499da66d86c4866c03ee3c47e5c04062c3de47898305e1b
-
SSDEEP
49152:Pqw4GmTUTYds48aBv0J4yoH4pDUua3Wvh+n6W/xsH6hVdWXh19gUY9x8CiNO4YNO:yduUIa39/6HUU00NbYN1cahaYG19V6y
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2268-0-0x0000000180000000-0x0000000180040000-memory.dmp upx behavioral1/memory/2268-4-0x0000000180000000-0x0000000180040000-memory.dmp upx behavioral1/memory/2268-3-0x0000000180000000-0x0000000180040000-memory.dmp upx behavioral1/memory/2268-1-0x0000000180000000-0x0000000180040000-memory.dmp upx behavioral1/memory/2268-2-0x0000000180000000-0x0000000180040000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
Processes:
16da586a37207e722ce4a660a595ba90_NeikiAnalytics.exepid process 2268 16da586a37207e722ce4a660a595ba90_NeikiAnalytics.exe 2268 16da586a37207e722ce4a660a595ba90_NeikiAnalytics.exe