Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
31/05/2024, 18:17
General
-
Target
edb1b308c2c313fa0472f2b78e0466a0_NeikiAnalytics.exe
-
Size
1.4MB
-
MD5
edb1b308c2c313fa0472f2b78e0466a0
-
SHA1
caf09c08c7f081b916a5b553e241599746a7d363
-
SHA256
005a4cc9cdbb4e5b1c2676be4850d96733398138c0d8267300ad7c337c06ff88
-
SHA512
382461deecfcde3fd4654627dac8d81dc1d56ba5c967a267d00f5cb191472354fe6ba249f20d933005ec66eaae13757a7483ab6bb6f7b1faba11a9dac5676109
-
SSDEEP
24576:XKikCa3OcWmrjL92vfm5U6zzaJea/ZS/QERT77Lv+f6T8TxL5qgAfTL7:XNa+cWmfB2Ha5z2cggQERTbExL5ID
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\edb1b308c2c313fa0472f2b78e0466a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\edb1b308c2c313fa0472f2b78e0466a0_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\edb1b308c2c313fa0472f2b78e0466a0_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\edb1b308c2c313fa0472f2b78e0466a0_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD59258e0410a48f68c7460f64e3791c294
SHA173256691af45ab5fa17125e98802288058ab75c9
SHA256bf39247bd4dab71b29abaeb2b57f3e5da067440fab3628777090ab30a619464a
SHA512b3882eaf9b88d55871025e97c0d5e2db3707b4521460dfd47f7c5dac82ba78d16e50105dea4417adf1c2870bd0b3e3decb615bf78d3f7480efcf2e5084767c0a
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
960KB