Analysis
- max time kernel
141s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
30/05/2024, 14:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe
Resource
win7-20240508-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
3 signatures
150 seconds
General
- Target b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe
- Size 2.3MB
- Sample240530-rdladscb77
- SHA256 8797be13d9060a125577f672371accf95155f3c2a5a08fe204a39cd76e7a6e72
- MD5 b95b7ffbec5c486f68954fb263e0da50
- SHA1 9a37526722b7b58b0cf42cd2ad5ef0d0a0092238
- SHA512 646c48f9664e5c5d3a1bde44719309dd8ffb924798833e82bbb0550ce00c0e752fde96ac34101cde9d1a73c72bb51103d1b5d6e3569861352fe92dd03529961c
- SSDEEP 49152:LFhF51oP2yYi3lWA6IXHJQ7cwR85DTjq3w16jvKPw321f9HnnhdDTE:/7eHV1WA6I3Jj1Eyx1NnzDT
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutoRun = "C:\\Users\\Admin\\AppData\\Local\\Temp\\b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe" b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe - Suspicious use of FindShellTrayWindow 7 IoCs
pid Process 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe 3680 b95b7ffbec5c486f68954fb263e0da50_NeikiAnalytics.exe