Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
29-05-2024 22:28
General
-
Target
58414cea2f74eb90a044e5782f07ede0_NeikiAnalytics.exe
-
Size
305KB
-
MD5
58414cea2f74eb90a044e5782f07ede0
-
SHA1
e3e0540dbf892b7bdd0e20966053b1f8822f609b
-
SHA256
251c48ce39b54c4b12cf85243c9ddcf21ce8dfe97fb87d1996a71932dd6cdc85
-
SHA512
c065abccd116d80fcc29cf66dff8b8a16b6b47d3ca1e49a521e13b6648a16e6dd5b4b8a58a9e779d2b3f4dd735fc3e3c2ca83da43f3147294644d97bfac60d10
-
SSDEEP
6144:OuGuRCkoWkzI6zxn1jkxM46id7OyksIdX4KZJRDNseTRw7vqeFb26d:OCRFtknnhsM4zxksIdbDH1cZb26
Score
10/10
Malware Config
Signatures
-
Imminent RAT
Remote-access trojan based on Imminent Monitor remote admin software.
-
Drops desktop.ini file(s) 2 IoCs
-
Drops file in Windows directory 3 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\58414cea2f74eb90a044e5782f07ede0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\58414cea2f74eb90a044e5782f07ede0_NeikiAnalytics.exe"1⤵
- Drops desktop.ini file(s)
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB