831a0ca34afaea27fce94cfb1b5a35c6e3badecfd4227b3878cb7599ec36ac8d

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
02-06-2024 04:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe
Size

5.4MB
MD5

349486df40b77f1eeddd15341a5b6480
SHA1

32244c78ddbd2014ee3200670c7943182d2198f8
SHA256

831a0ca34afaea27fce94cfb1b5a35c6e3badecfd4227b3878cb7599ec36ac8d
SHA512

a0b311fcf24ef2eadb4130e1d02ec6b6c3379ceba54daa3ac86636ac2319ad6860e6105cad67c8f70e686c9f3b1c761a9e87275b373ea2abbaad8f18c7ff435e
SSDEEP

98304:oKgInPKxhom+kacJfAvddBijwI3uwTd0tMz:oKgNxhom+FcHkQ0tMz

Score

5^/10

Malware Config

Signatures

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2164 set thread context of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 10 IoCs

description	pid	Process	procid_target
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28
PID 2164 wrote to memory of 2712	2164	349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\349486df40b77f1eeddd15341a5b6480_NeikiAnalytics.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2164
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
  2⤵
  PID:2712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2164-48-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-38-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-2-0x00000000053B0000-0x000000000549A000-memory.dmp

Filesize
936KB

Download
memory/2164-0-0x00000000746EE000-0x00000000746EF000-memory.dmp

Filesize
4KB

Download
memory/2164-4-0x00000000005D0000-0x00000000005EC000-memory.dmp

Filesize
112KB

Download
memory/2164-46-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-6-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-65-0x00000000746E0000-0x0000000074DCE000-memory.dmp

Filesize
6.9MB

Download
memory/2164-8-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-10-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-18-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-36-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-64-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-62-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-60-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-58-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-56-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-54-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-52-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-50-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-3-0x00000000746E0000-0x0000000074DCE000-memory.dmp

Filesize
6.9MB

Download
memory/2164-1-0x0000000001390000-0x00000000018FA000-memory.dmp

Filesize
5.4MB

Download
memory/2164-5-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-44-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-42-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-40-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-35-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-32-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-30-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-28-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-26-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-24-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-22-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-20-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-16-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-14-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-12-0x00000000005D0000-0x00000000005E5000-memory.dmp

Filesize
84KB

Download
memory/2164-81-0x00000000746E0000-0x0000000074DCE000-memory.dmp

Filesize
6.9MB

Download
memory/2712-68-0x0000000000400000-0x0000000000459000-memory.dmp

Filesize
356KB

Download
memory/2712-80-0x0000000000401000-0x000000000043C000-memory.dmp

Filesize
236KB

Download
memory/2712-66-0x0000000000400000-0x0000000000459000-memory.dmp

Filesize
356KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads