Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 20:36
Behavioral task
behavioral1
Sample
35993372299b4d34180d71344cf7f090_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
35993372299b4d34180d71344cf7f090_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
35993372299b4d34180d71344cf7f090_NeikiAnalytics.exe
-
Size
83KB
-
MD5
35993372299b4d34180d71344cf7f090
-
SHA1
ab81a93a646d4a29f4ca4251a9ddc1ae29fea597
-
SHA256
995c657714d1fbc66250c6803cd82a4e64d00a8c3d7cc9e5760784143c9a4753
-
SHA512
abacb0968b47dc83fb160c6e95b7f29d7370700b42cd05f05aa40e58ca1e66808587d58bd6799e40df1f9d9fe8ec481bfc5c44359aeaabded2c3e25d0b5745ce
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+ZK:LJ0TAz6Mte4A+aaZx8EnCGVuZ
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2352-0-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2352-1-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2352-5-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2352-11-0x0000000000400000-0x000000000042A000-memory.dmp upx C:\Users\Admin\AppData\Local\Temp\rifaien2-0QsdnRHPwNisorHn.exe upx behavioral1/memory/2352-15-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2352-21-0x0000000000400000-0x000000000042A000-memory.dmp upx behavioral1/memory/2352-28-0x0000000000400000-0x000000000042A000-memory.dmp upx
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\rifaien2-0QsdnRHPwNisorHn.exeFilesize
83KB
MD528f9e380358d2da12b0b324316f62714
SHA11af621d7bd42c93bb832fae5c1763bc92e3a38ec
SHA256c8ba633c6db3c4aab3caaba84e339618b828529e1c6de74a979cbd785369237b
SHA512639753fef53ceb0e8ea5c0ae64b7c4bdb221b1107f2db369b424953217d0bea6ea2fb9f8d78e1f559b6daeb9ccc3aa74ee707fe73f3fe64d01e1691d0cc40b94
-
memory/2352-0-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2352-1-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2352-5-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2352-11-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2352-15-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2352-21-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB
-
memory/2352-28-0x0000000000400000-0x000000000042A000-memory.dmpFilesize
168KB