Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 20:42

General

  • Target

    003ac3595e3fe2e720ad547f1ee23a30_NeikiAnalytics.exe

  • Size

    605KB

  • MD5

    003ac3595e3fe2e720ad547f1ee23a30

  • SHA1

    afc29570df35f60b69e541de546878815ee0cde8

  • SHA256

    0da34b9d19d7290da01c9b70b399ceaadb7df10a86b2ee5116dca20c836be8bb

  • SHA512

    e78b82a01c2a3802569e53baa5dde3d50a0e9cd4f2a75b50743276dcdc104d4055d19c23b31c114f27fcfc434e83149fa7fe2c92862a77ea7e0fd2eef2351ad5

  • SSDEEP

    12288:AuyndwCg6/xjPHFFBwpRDftD7IBUgbScDQCSkb6wjfRMVviOvf7sibN3A1G31f9:Aue1g6p7HF/w/ftDsBUiScD7WGfWVbvd

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\003ac3595e3fe2e720ad547f1ee23a30_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\003ac3595e3fe2e720ad547f1ee23a30_NeikiAnalytics.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2780

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2780-0-0x0000000000400000-0x000000000049B000-memory.dmp

          Filesize

          620KB

        • memory/2780-1-0x0000000000310000-0x0000000000377000-memory.dmp

          Filesize

          412KB

        • memory/2780-6-0x0000000000310000-0x0000000000377000-memory.dmp

          Filesize

          412KB

        • memory/2780-11-0x0000000000400000-0x000000000049B000-memory.dmp

          Filesize

          620KB