7fd6b6407bc502a3ddb6ef39454f9f8c35c30de7d9a17d1d2f9173af98e1c54b

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
03/06/2024, 10:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a02e13f249cbc9726b50e5e8199a4260_NeikiAnalytics.exe
Size 141KB
Sample240603-mkcjlsbd3x
SHA256 7fd6b6407bc502a3ddb6ef39454f9f8c35c30de7d9a17d1d2f9173af98e1c54b
MD5 a02e13f249cbc9726b50e5e8199a4260
SHA1 4ead372ecc3e5b729e5da3cbf54c8fcb48133c62
SHA512 9ee2533c979b35cb7b8df66868d75d22eb3a294b336903d4b6cca627f5ef4433665ff69e8bd4b6be5904d6e7469dee88e020265a32b420d5e47543207c4f7df9
SSDEEP 3072:mgXdZt9P6D3XJM45xqQe9Qnn3UQwIAwhxpAu5kK6vIyKCt8oTWqEA:me34KSK+n/bhxpAukayGo/
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 4 IoCs

pid	Process
1704	a02e13f249cbc9726b50e5e8199a4260_NeikiAnalytics.exe
1704	a02e13f249cbc9726b50e5e8199a4260_NeikiAnalytics.exe
1704	a02e13f249cbc9726b50e5e8199a4260_NeikiAnalytics.exe
1704	a02e13f249cbc9726b50e5e8199a4260_NeikiAnalytics.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a02e13f249cbc9726b50e5e8199a4260_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\a02e13f249cbc9726b50e5e8199a4260_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
PID:1704

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

NSISArray.dll

Path \Users\Admin\AppData\Local\Temp\nso19C9.tmp\NSISArray.dll
Size 19KB
SHA256 6a129a9eefae85a9412e889e0c74fdaa21d20254fa13cacef5429885775017dc
MD5 14b848866035dea39b912da628307231
SHA1 d00c8963aee8038d8a22f098cef69b31007196e5
SHA512 4538058426c742bf7d823d1cac5303eeff8bf0b524459262181ac79695eead705e7590ae63ce996b8e3afd9a6c8d1fec503f9a11772ebe5c5c4e01930ed97b16
SSDEEP 384:J+o6oNJDOD4mqjCQ2UcW3++Mnnm8GPHltUIH4qpjiX:gDoNJyD4mqjCOsnmtHltUIYqFi
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path \Users\Admin\AppData\Local\Temp\nso19C9.tmp\System.dll
Size 11KB
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

Submit Download

linker.dll

Path \Users\Admin\AppData\Local\Temp\nso19C9.tmp\linker.dll
Size 7KB
SHA256 67552ebf58e98e841dcd9f4213ad3eb134d595f04839771618f0bb1c48ea2b92
MD5 122754bdae09014ed8be78a8dd3618c0
SHA1 8a1d4a0b8202d2261a12d97aebfe33144c274444
SHA512 7b9b5f8b52db793b4833a75bd8f122f28f2df00d43bd35efc831c2b8457009d51fe39874c691389c2fdc87ed411919b59da50199e3f719bd4cfb166367f185d9
SSDEEP 96:Xky9W/VixqhFtMpnEH5lpDyUL2bk/gkfgilv:XH9W/oCFtMZEH5NL2bTkfFlv
MD5 SHA1 SHA512 SSDEEP

Submit Download

nsDialogs.dll

Path \Users\Admin\AppData\Local\Temp\nso19C9.tmp\nsDialogs.dll
Size 9KB
SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
MD5 c10e04dd4ad4277d5adc951bb331c777
SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads