Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28-05-2024 10:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3f614eadc5ff80b49530ee0f80f99b90_NeikiAnalytics.exe
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3f614eadc5ff80b49530ee0f80f99b90_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
3f614eadc5ff80b49530ee0f80f99b90_NeikiAnalytics.exe
-
Size
601KB
-
MD5
3f614eadc5ff80b49530ee0f80f99b90
-
SHA1
38f12a52298920740404b8bdd44d24b6ed988636
-
SHA256
cbb81c60341930d1ee80fb99e2449270fad8a0826cafe74cf42c8b4677a5e452
-
SHA512
fe5cb3624e1b264ea8d53ab763fe945459f3cc5bf9eaa6cf84e71134a6ffb49763787aa59ad06eded1b2319174a5c9feea813e8636aebbc6608a7a1735ad7546
-
SSDEEP
12288:fvVAKGVlM41NTnXENcMduaD3aawgPwCnQ3MHv8CI4OJ1bbPHHcFb+KKqCGNpcyoN:KRVldlnXfH9gPwCn7vOb7HHcp/CGXQp
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 3f614eadc5ff80b49530ee0f80f99b90_NeikiAnalytics.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 3940 3f614eadc5ff80b49530ee0f80f99b90_NeikiAnalytics.exe