Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
29-05-2024 03:17
General
-
Target
3568437075c2e0b7189f548989ab5220_NeikiAnalytics.exe
-
Size
280KB
-
MD5
3568437075c2e0b7189f548989ab5220
-
SHA1
c592d04c9df968f00d1d18294208d4c535761c7d
-
SHA256
4b8e8e48be79d34e6185503ae1a645a3356fe6ed56e48c9af594530f890e8fc8
-
SHA512
4a6c03c015d98f0a51a54dee1ce149d17d3749141d2671234b2acf820db180e8ca36694caca83823637a80e0d3869638b964d0183e76446652b01e44e52a0972
-
SSDEEP
6144:rHCsc2dAu82ThRA5VfcKvBaF97Vw/XcdU:Dw2dAu8COvfcqBG76/Xcm
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3568437075c2e0b7189f548989ab5220_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3568437075c2e0b7189f548989ab5220_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\3568437075c2e0b7189f548989ab5220_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\3568437075c2e0b7189f548989ab5220_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
280KB
MD5e8b5de8bbcfdf4f2b6bff418d4048a9e
SHA1101a9d7b3f507429a9c56ce299ee282570454092
SHA256e8cbfec68fd292efaf9544f7025d9c6a273edd08e258a649ced0acc3338e3de3
SHA512c7325ad6e1f9934e325a55c85c2b26137c7ed4991604381f00311359406434399cd16e3530ed3145a2532b2ef9ead651859aa7f9f0780ef025ca32ea9001cb69
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
104KB
-
Filesize
280KB
-
Filesize
280KB