Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 20:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
003ac3595e3fe2e720ad547f1ee23a30_NeikiAnalytics.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
003ac3595e3fe2e720ad547f1ee23a30_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
2 signatures
150 seconds
General
-
Target
003ac3595e3fe2e720ad547f1ee23a30_NeikiAnalytics.exe
-
Size
605KB
-
MD5
003ac3595e3fe2e720ad547f1ee23a30
-
SHA1
afc29570df35f60b69e541de546878815ee0cde8
-
SHA256
0da34b9d19d7290da01c9b70b399ceaadb7df10a86b2ee5116dca20c836be8bb
-
SHA512
e78b82a01c2a3802569e53baa5dde3d50a0e9cd4f2a75b50743276dcdc104d4055d19c23b31c114f27fcfc434e83149fa7fe2c92862a77ea7e0fd2eef2351ad5
-
SSDEEP
12288:AuyndwCg6/xjPHFFBwpRDftD7IBUgbScDQCSkb6wjfRMVviOvf7sibN3A1G31f9:Aue1g6p7HF/w/ftDsBUiScD7WGfWVbvd
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 003ac3595e3fe2e720ad547f1ee23a30_NeikiAnalytics.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2780 003ac3595e3fe2e720ad547f1ee23a30_NeikiAnalytics.exe