Analysis
- max time kernel
141s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
27/05/2024, 18:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe
Resource
win7-20240508-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
3 signatures
150 seconds
General
- Target 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe
- Size 2.3MB
- Sample240527-wz35jsdb2v
- SHA256 1877b6aa983b3541bf8b895a876d945c58782cf6c2cb3e83a1f6f3d8f7dc422e
- MD5 0a586bdb1920dc338b8073776dae4dc0
- SHA1 01bf0759040d68048e768e290550e66a69e072b9
- SHA512 dc8b1b3c6892e745bfeded419dcfff8f1bbf3b28e327918fa738459c4f090302b09d9345788765bb592ecdc4544460d803b4696504819ee943d15bf739198c16
- SSDEEP 49152:xGNXZAJ6QrTEH4OT78msSh81gWZdelwfk9crN1ju36AlIesNiP+fs4/Y+:xiZgrWl8ms08aWZU3MXju/IVWcY
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutoRun = "C:\\Users\\Admin\\AppData\\Local\\Temp\\0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe" 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe - Suspicious use of FindShellTrayWindow 7 IoCs
pid Process 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe 4160 0a586bdb1920dc338b8073776dae4dc0_NeikiAnalytics.exe