Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 10:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8a66b250f1382980ec69b32edb5ed160_NeikiAnalytics.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
General
-
Target
8a66b250f1382980ec69b32edb5ed160_NeikiAnalytics.exe
-
Size
949KB
-
MD5
8a66b250f1382980ec69b32edb5ed160
-
SHA1
b50bd41795df365162e2484499fe62296ebb3b09
-
SHA256
62f9682b37f89b3613e555cf89a29a25e4c4f442ada91461d19cfcec25ffa496
-
SHA512
142e161052be70729088e70bcfde914df8b8122050b3717587184a1f37c3289a1c35837e1aa70aa17f53564801ff5b20d5f254c46927227462e068fb2a3aafe2
-
SSDEEP
24576:KhXiV6+BDQTYfCsSwuux3lPanAMSeJBa1QjtZRLb2DR05xu:KhX5+BlC/wj3lPanICcGjtZ9x
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
Processes:
8a66b250f1382980ec69b32edb5ed160_NeikiAnalytics.exedescription ioc process File opened for modification C:\Windows\System32\alg.exe 8a66b250f1382980ec69b32edb5ed160_NeikiAnalytics.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
8a66b250f1382980ec69b32edb5ed160_NeikiAnalytics.exedescription pid process Token: SeTakeOwnershipPrivilege 1704 8a66b250f1382980ec69b32edb5ed160_NeikiAnalytics.exe