Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 21:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3d4847469e061e60165f831f0b236480_NeikiAnalytics.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
General
-
Target
3d4847469e061e60165f831f0b236480_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
3d4847469e061e60165f831f0b236480
-
SHA1
a410efb57a3bdfbd12dce7ff506ce0e3d2494374
-
SHA256
fca50b2240597dbeefd02fc64e6cb9b146cbbee6d1aebbf2ba9a08dbe4465f9d
-
SHA512
2b5ee109f0a86f9da92b7fd236d807f43e5f956d7912b5a8e5b90fc2cd45bd284519546b6c7f11260fe4e183e8bea41507de201466f64b22ff7c6abc5bc7ddfb
-
SSDEEP
24576:7hXqV6+BDQTYfCsSwuuxrV49pFT0SLTQYWkK2u4dax8C:7hXB+BlC/wjrs7YSLTQYWkK2/
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
Processes:
3d4847469e061e60165f831f0b236480_NeikiAnalytics.exedescription ioc process File opened for modification C:\Windows\System32\alg.exe 3d4847469e061e60165f831f0b236480_NeikiAnalytics.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
3d4847469e061e60165f831f0b236480_NeikiAnalytics.exedescription pid process Token: SeTakeOwnershipPrivilege 2472 3d4847469e061e60165f831f0b236480_NeikiAnalytics.exe