Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
02/06/2024, 04:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
39ede8353c061726211405b373797ce0_NeikiAnalytics.exe
Resource
win7-20240508-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
39ede8353c061726211405b373797ce0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
3 signatures
150 seconds
General
-
Target
39ede8353c061726211405b373797ce0_NeikiAnalytics.exe
-
Size
2.3MB
-
MD5
39ede8353c061726211405b373797ce0
-
SHA1
11c15a38cf8feb7162864dc8c8205cb74e30a4a8
-
SHA256
1897d3dd109255d39123dc6823fac1b1bc0498ae9c975d207e40eb33d13478cd
-
SHA512
e084224c607b485c569e2dfbbb1cbd4280c712032c819128adb519c8f06371cffd50f64a3dcec736e2f7912de5550248834d67f23106c45387dc13c99d428a7e
-
SSDEEP
49152:fQ9v3gWoOEcEB7PwBn66JG+3ecNZO6x10O/pJZ2T+5hOr/mo:o9v3mOEZKBnJJFZZFcEEkOS
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutoRun = "C:\\Users\\Admin\\AppData\\Local\\Temp\\39ede8353c061726211405b373797ce0_NeikiAnalytics.exe" 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe -
Suspicious use of FindShellTrayWindow 7 IoCs
pid Process 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe -
Suspicious use of SendNotifyMessage 7 IoCs
pid Process 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe 388 39ede8353c061726211405b373797ce0_NeikiAnalytics.exe