Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 02:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exe
Resource
win7-20240419-en
windows7-x64
2 signatures
150 seconds
General
-
Target
7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exe
-
Size
604KB
-
MD5
7cae9a90d74c77e23f34137d6940a770
-
SHA1
548204815e5ace136e2d5f9ceda621860cddcd46
-
SHA256
5712791dc101ef56dae9f25893ae3e5f2e35bdbdd9b898e28c6cae2636089657
-
SHA512
f4c7aa417f2d799a9beda59e2df3dfc9f4e1b7c93f3ba9c26abedb0d81dc36b07dc6c88e1ef782d67a1ebee7a67421506e4030055b6f3c77e918cb0d8889ec22
-
SSDEEP
12288:RIL6+oH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:yLM2JOt934J7Z6bQaj1BvUm9J
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
Processes:
7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exedescription ioc process File opened for modification C:\Windows\System32\alg.exe 7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exedescription pid process Token: SeTakeOwnershipPrivilege 2248 7cae9a90d74c77e23f34137d6940a770_NeikiAnalytics.exe