Analysis

  • max time kernel
    93s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/05/2024, 01:52

General

  • Target

    5f6a5b4c9d9c879a2ec95020e8217e30_NeikiAnalytics.exe

  • Size

    412KB

  • MD5

    5f6a5b4c9d9c879a2ec95020e8217e30

  • SHA1

    8eb0489d0325bcd24957a8e49092e24f3bea779b

  • SHA256

    3be2fce58767c93e19dbbfe95e737389b08d874bdd6a293ad257158bc25ec756

  • SHA512

    c6ce1a652e6f9dda9a1fa30a731aeb71f85b07c0ae7d2bac905ddd26b27850421fb0faf35013321e21c0f852d20eb4a77fd255e9fdeb3ead736e280706e32190

  • SSDEEP

    12288:RJf1txVbS+vHH4Dnsn5FyycyeyQyy+y5yzysyyqWyobyFyy3tyCyybyqiyyyeyyY:RJf1tDbbvHH4DnG5FyycyeyQyy+y5yz

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 51 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\5f6a5b4c9d9c879a2ec95020e8217e30_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\5f6a5b4c9d9c879a2ec95020e8217e30_NeikiAnalytics.exe"
    1⤵
    • Loads dropped DLL
    PID:1644

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\nsz3877.tmp\NSISdl.dll

          Filesize

          14KB

          MD5

          254f13dfd61c5b7d2119eb2550491e1d

          SHA1

          5083f6804ee3475f3698ab9e68611b0128e22fd6

          SHA256

          fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28

          SHA512

          fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7