Analysis
-
max time kernel
130s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
23/05/2024, 06:25
General
-
Target
8f824f0437b0cba0488c5a110286dbf0_NeikiAnalytics.exe
-
Size
97KB
-
MD5
8f824f0437b0cba0488c5a110286dbf0
-
SHA1
94c9bd067675d5c787e5b9b533699d64d2ac9220
-
SHA256
3340951ca4c9645b21a8f7d9c977a93438b88405d4e00504cfe7486576debdde
-
SHA512
3d0df9155245fc8b495ba0303c17339fc898da0e125fabad4889fdf05107ed6198ac0d4e9dffa1698c15edd831212d3de2ce12b422b5dfab0b3241a4d8dba589
-
SSDEEP
1536:pniC/KDmsbTKXbYi9npwrU3iBNZio9in5iNZzsPPPisvepZc:xijysXisi9npwgyYF5GZ0PKpZc
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8f824f0437b0cba0488c5a110286dbf0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8f824f0437b0cba0488c5a110286dbf0_NeikiAnalytics.exe"1⤵
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\8f824f0437b0cba0488c5a110286dbf0_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\8f824f0437b0cba0488c5a110286dbf0_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
97KB
MD58f1540374ac7be7295bdfebe990d0165
SHA16a0a849b365cdfaf0f8afe60b963f06da4f50dcd
SHA25623080b4f79eecae2e890f69e8520eccda93f27073618fee156c1fcef79bc87a2
SHA5125aa6a6d4d60152e7ef873d859bd9656fddbcae6ceb64e9da9e5403c0b37c974c3c5bb102b9a4851e590c40a2ca6da25eb3512b5aff1241a95cbfa166cff47111
-
Filesize
192KB
-
Filesize
192KB
-
Filesize
108KB
-
Filesize
108KB
-
Filesize
192KB
-
Filesize
192KB
-
Filesize
56KB
-
Filesize
108KB