Analysis
-
max time kernel
121s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-05-2024 05:59
Behavioral task
behavioral1
Sample
4c36a165992509e1448a23aa71989160_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4c36a165992509e1448a23aa71989160_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
4c36a165992509e1448a23aa71989160_NeikiAnalytics.exe
-
Size
130KB
-
MD5
4c36a165992509e1448a23aa71989160
-
SHA1
34fada5c7983eabdc2f8f7d190a66c5cce08330d
-
SHA256
958bab74ae1391abb9378081027d5651dc7974ee908ebc1b8fa4d2bb5964e32e
-
SHA512
4cbb8bb2c2a426bcd03ff205370e66655d29211c446a7eaf9926395ffd9ea511f88c0390f0f23154a0372e52330e8c600a6841c110aef753a2749edf35b06d0f
-
SSDEEP
1536:eH1ZaQvR1KiX3NK6I+hZhYrt/w5Q6G6IpiRYzz9qJHhhnm0yG5aP/5UROXTmo:SKQJcinxphkG5Q6GdpIOkJHhKRyOXK
Malware Config
Signatures
-
Processes:
resource yara_rule behavioral1/memory/2304-0-0x0000000000400000-0x0000000000423000-memory.dmp upx behavioral1/memory/2304-562-0x0000000000400000-0x0000000000423000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
4c36a165992509e1448a23aa71989160_NeikiAnalytics.exepid process 2304 4c36a165992509e1448a23aa71989160_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2304-0-0x0000000000400000-0x0000000000423000-memory.dmpFilesize
140KB
-
memory/2304-3-0x0000000000230000-0x0000000000231000-memory.dmpFilesize
4KB
-
memory/2304-9-0x00000000002A0000-0x00000000002A1000-memory.dmpFilesize
4KB
-
memory/2304-11-0x00000000002A0000-0x00000000002A1000-memory.dmpFilesize
4KB
-
memory/2304-21-0x0000000000360000-0x0000000000361000-memory.dmpFilesize
4KB
-
memory/2304-41-0x00000000003E0000-0x00000000003E1000-memory.dmpFilesize
4KB
-
memory/2304-51-0x0000000000450000-0x0000000000451000-memory.dmpFilesize
4KB
-
memory/2304-562-0x0000000000400000-0x0000000000423000-memory.dmpFilesize
140KB
-
memory/2304-561-0x0000000000416000-0x0000000000417000-memory.dmpFilesize
4KB