Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29-05-2024 02:27
General
-
Target
2efea3b5418fc348616fae22837c6550_NeikiAnalytics.exe
-
Size
209KB
-
MD5
2efea3b5418fc348616fae22837c6550
-
SHA1
9775a7e7afecb15103b50861dc0d580a757ef606
-
SHA256
f5127e545612e0a003c86ecc27850fa7784bdc56ade98e8851df5dfa43e71824
-
SHA512
fed034a80149d1499b45937785261c6c567e59a96e7cc1d6d1ab69901cd7b928d78e8297dad9ddbadca09a38fcea3ae86035c83238a4e6b568309bcd170afd68
-
SSDEEP
6144:TeDIk2VYAbAlX7ai8eeznrZdEv9ketfXp:TPYAbSaitqr29Ftfp
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2efea3b5418fc348616fae22837c6550_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\2efea3b5418fc348616fae22837c6550_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2efea3b5418fc348616fae22837c6550_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\2efea3b5418fc348616fae22837c6550_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
209KB
MD5db55333ae3b92f8100e3581f5952a6bd
SHA12205dd14073add6a7cb9914a5bc4672b89e0f74f
SHA256e5539545ff99c1fd5abdc639ec6c9479c718ec5509e1cd0a187a64a92ff8b8e9
SHA512cc69350ecde9be181a0296b0a54366c323f1aa4ba4ebd21f3e0f16064a46649be165fa07eb6f1d4bdf3c3bd4b0697ad4292509d01632ff4ad6f8d52ee0112aad
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
104KB
-
Filesize
256KB