Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29/05/2024, 22:15
General
-
Target
57e8265d4ab7d71d0455cce4c2b12eb0_NeikiAnalytics.exe
-
Size
203KB
-
MD5
57e8265d4ab7d71d0455cce4c2b12eb0
-
SHA1
b82f4ccf0babd9c6b8563a0ffd3483106c833b15
-
SHA256
9fdd1af5a3ece6e3e9b0c86595482fa47301425ce67aeeefaab11c2339249776
-
SHA512
168ccb3107b7749a3440b301a608deedaa4ffcbfbe7f8331c7221714dd3a59dc5afefa7d14d562715a76bee8880f760d27519f1bbdd3dd61681d9606ada50271
-
SSDEEP
6144:RCl/BxKrGk88gWSjy4Ji/+X/gfMLZZsZ:MdBxKrGug44Ji/+vEGvg
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\57e8265d4ab7d71d0455cce4c2b12eb0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\57e8265d4ab7d71d0455cce4c2b12eb0_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\57e8265d4ab7d71d0455cce4c2b12eb0_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\57e8265d4ab7d71d0455cce4c2b12eb0_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
203KB
MD5633e12cc829e5923a93d9f41fea69e0c
SHA113c9d8e68791a498ef4b733d6dd5d5d0babe395a
SHA2565ee3ff0b8e2fdb1fdd8d12ae8e52d0493109aa8ce438daf7fbc840b90d5a8332
SHA5128fd6cfd9c722ae3de93a46e8f5f28e23ee2cf6123b86eb61a7b0b3ea5ae69156d085054046b2637d49655d30d2c2cd1e0351cd905158bf216718a9af4c0e3658
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
84KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB