Analysis

  • max time kernel
    141s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 10:46

General

  • Target

    069c0af8ba8972fa2eff6f57632ad620_NeikiAnalytics.exe

  • Size

    540KB

  • MD5

    069c0af8ba8972fa2eff6f57632ad620

  • SHA1

    78fbb67276dbd0288bc8313ddc096edca95e3508

  • SHA256

    f836a89b0bef7e2a1e92a2b9557a4f1af32efe646877ce64f2e72331b7ab3005

  • SHA512

    96854a7e9d00949b9bbad43f6dac8fc9906f68385584cc4c8ea320b40c5122eeeeeea66b8e2cac3b58490bc0a8e53df3472d7114bf38b839adfee0c05087d009

  • SSDEEP

    12288:tR5+iucb9Wughxi1NHsl4+nqLDAeIDRbF1qRYm/q:tzQY8SBsuDM15F1qRd

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\069c0af8ba8972fa2eff6f57632ad620_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\069c0af8ba8972fa2eff6f57632ad620_NeikiAnalytics.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2932

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2932-3-0x0000000000400000-0x000000000046F000-memory.dmp

          Filesize

          444KB

        • memory/2932-2-0x00000000002D0000-0x000000000033B000-memory.dmp

          Filesize

          428KB

        • memory/2932-1-0x0000000002450000-0x0000000002550000-memory.dmp

          Filesize

          1024KB

        • memory/2932-4-0x0000000000400000-0x00000000023A3000-memory.dmp

          Filesize

          31.6MB

        • memory/2932-5-0x0000000000400000-0x00000000023A3000-memory.dmp

          Filesize

          31.6MB

        • memory/2932-7-0x0000000002450000-0x0000000002550000-memory.dmp

          Filesize

          1024KB

        • memory/2932-8-0x0000000000400000-0x000000000046F000-memory.dmp

          Filesize

          444KB