Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 22:30

General

  • Target
    77264b0d3445f0f14f6044f56b530270_NeikiAnalytics.exe
  • Size 4.8MB
  • Sample240602-2fbh3shd5x
  • SHA256 449abf5a1461a359801fd8e2b0aaf17b3349f038caf341bf38975ef8c13814ad
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\77264b0d3445f0f14f6044f56b530270_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\77264b0d3445f0f14f6044f56b530270_NeikiAnalytics.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2244
    • C:\Users\Admin\AppData\Local\Temp\1F72.tmp
      "C:\Users\Admin\AppData\Local\Temp\1F72.tmp" --splashC:\Users\Admin\AppData\Local\Temp\77264b0d3445f0f14f6044f56b530270_NeikiAnalytics.exe D4D6A7C0F21D3330E219AF7EA941031069CFA40380006B83304431F6A232E2D64ADB03DBDC386A1F82DB4C9F595044A8E8DF4F9F8456BD16FF4A4F499C0F9ADA
      2⤵
      • Deletes itself
      • Executes dropped EXE
      PID:2240

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1F72.tmp

        • Path \Users\Admin\AppData\Local\Temp\1F72.tmp
        • Size 4.8MB
        • SHA256 07905c5c147a5fc1cdb7b6d30daf7cab71dadc90cc56c3b9b9ca17befbd7cc2d
        • MD5 SHA1 SHA512 SSDEEP

        memory/2240-9-0x0000000000400000-0x0000000000849000-memory.dmp

        memory/2244-0-0x0000000000400000-0x0000000000849000-memory.dmp