Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 21:15

General

  • Target

    3d4847469e061e60165f831f0b236480_NeikiAnalytics.exe

  • Size

    1.6MB

  • MD5

    3d4847469e061e60165f831f0b236480

  • SHA1

    a410efb57a3bdfbd12dce7ff506ce0e3d2494374

  • SHA256

    fca50b2240597dbeefd02fc64e6cb9b146cbbee6d1aebbf2ba9a08dbe4465f9d

  • SHA512

    2b5ee109f0a86f9da92b7fd236d807f43e5f956d7912b5a8e5b90fc2cd45bd284519546b6c7f11260fe4e183e8bea41507de201466f64b22ff7c6abc5bc7ddfb

  • SSDEEP

    24576:7hXqV6+BDQTYfCsSwuuxrV49pFT0SLTQYWkK2u4dax8C:7hXB+BlC/wjrs7YSLTQYWkK2/

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d4847469e061e60165f831f0b236480_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\3d4847469e061e60165f831f0b236480_NeikiAnalytics.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2472-0-0x0000000001BE0000-0x0000000001C40000-memory.dmp

    Filesize

    384KB

  • memory/2472-8-0x0000000001BE0000-0x0000000001C40000-memory.dmp

    Filesize

    384KB

  • memory/2472-6-0x0000000140000000-0x0000000140196000-memory.dmp

    Filesize

    1.6MB

  • memory/2472-7-0x0000000001BE0000-0x0000000001C40000-memory.dmp

    Filesize

    384KB

  • memory/2472-15-0x0000000140000000-0x0000000140196000-memory.dmp

    Filesize

    1.6MB

  • memory/2472-14-0x0000000001BE0000-0x0000000001C40000-memory.dmp

    Filesize

    384KB