Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 01:28
Static task
static1
Behavioral task
behavioral1
Sample
6d55da2c1387af5a9dff5cd43d706e60_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6d55da2c1387af5a9dff5cd43d706e60_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
6d55da2c1387af5a9dff5cd43d706e60_NeikiAnalytics.exe
-
Size
965KB
-
MD5
6d55da2c1387af5a9dff5cd43d706e60
-
SHA1
96534624feb0432ccab8c7662e93eb1620e82c66
-
SHA256
fd1adfdbcbe856e4258d056dec33495cfb35a48eba39988b84f2fccaaacc2dfb
-
SHA512
54fa11c15f0da45d7251b9a21b0d3992177b37fa52dd034486b9082a1b06d2549c78f71dbf6563a102858fd66f531858add2e1f170a0afcaca6e0c98be3c8a26
-
SSDEEP
12288:i2ToLD2QfWUEknSsmjj/UVF4TkScNEo/TjMVJK1P5aEL3YFyhxoeVsc:ikuPfWsnnw/UV+kScN9HMVcRaF2v1
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes:
6d55da2c1387af5a9dff5cd43d706e60_NeikiAnalytics.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Windows\CurrentVersion\Run\MSNCore = "C:\\Users\\Admin\\AppData\\Local\\upNext.exe --i" 6d55da2c1387af5a9dff5cd43d706e60_NeikiAnalytics.exe -
Suspicious behavior: RenamesItself 1 IoCs
Processes:
6d55da2c1387af5a9dff5cd43d706e60_NeikiAnalytics.exepid process 992 6d55da2c1387af5a9dff5cd43d706e60_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\6d55da2c1387af5a9dff5cd43d706e60_NeikiAnalytics.exeFilesize
965KB
MD5dae65cc707d755701f3fd3089a751adb
SHA1650ebc75156892ed5070334df579ec46d4c389d2
SHA2562b607f097ea20e2c06c57906609c024672c67da86569b669515f9459bf42fad3
SHA5120c1360a9dc5463cf308321cd34bf9193b2889c189e1c24ce2cead66192e4a2f83b9e909c413cd9af0d4fb1eb776ff2adc9693d5d75e78a070ca13ac59e5d1447
-
memory/992-13-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-14-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-3-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-9-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-10-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-11-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-4-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-2-0x0000000000330000-0x0000000000331000-memory.dmpFilesize
4KB
-
memory/992-12-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-15-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-16-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-17-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-18-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-19-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB
-
memory/992-20-0x0000000000040000-0x0000000000139000-memory.dmpFilesize
996KB