Overview

overview

6

Static

static

3

11e5a8fba6...cs.exe

windows7-x64

6

11e5a8fba6...cs.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-06-2024 00:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    11e5a8fba6b93ab78c50f3cc5a07bda0_NeikiAnalytics.exe

  • Size

    2.3MB

  • MD5

    11e5a8fba6b93ab78c50f3cc5a07bda0

  • SHA1

    5f7dd8c6dd0a2dc509bdcdc052262a49aa2e1d1e

  • SHA256

    f671c162c39bc30317eca131eb3399bc5d84f8d3c8be24b008a879d675b3f31f

  • SHA512

    164ebaa69fa8a4518340f82988d90512e106183978dffa9c51debedebf1f2a8b2fe7ec2103d4073e9593638f76640910e4ae1c9e11952a45a65cca05f94e270d

  • SSDEEP

    49152:4mh33roo1wKQz4zCxslW78LaxMYz5NckWiXbbFrlqRor:dMo1wKOlqlmaTEZPHB

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\11e5a8fba6b93ab78c50f3cc5a07bda0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\11e5a8fba6b93ab78c50f3cc5a07bda0_NeikiAnalytics.exe"
    1⤵
    • Adds Run key to start application
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/540-0-0x0000000140000000-0x00000001404A5000-memory.dmp

    Filesize

    4.6MB

    Download