Analysis
- max time kernel
121s - max time network
122s - platform
windows7_x64 - resource
win7-20240419-en - resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system - submitted
03/06/2024, 10:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a08b2efceb96a77bd736b86d6010b6d0_NeikiAnalytics.exe
Resource
win7-20240419-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a08b2efceb96a77bd736b86d6010b6d0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
3 signatures
150 seconds
General
- Target a08b2efceb96a77bd736b86d6010b6d0_NeikiAnalytics.exe
- Size 849KB
- Sample240603-ms637ada67
- SHA256 756eeefcc7214469f28c19777e8539944891ec700c7ef2f357f749e65b664be6
- MD5 a08b2efceb96a77bd736b86d6010b6d0
- SHA1 5b5c04bf3f24a4a9c5e4136fac41d498581a8326
- SHA512 2fef4df3e07e42ad9578007defbb7d5976ba4c0092064036221beb8ce5431df1c77516752dfebb8d0aa9c7cde84224de51a0d9df64552a6b3231448f1c6500e6
- SSDEEP 24576:U1vk1agfkfgaIfwIxXsqjnhMgeiCl7G0nehbGZpbD:lMfgaIfwUrDmg27RnWGj
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe a08b2efceb96a77bd736b86d6010b6d0_NeikiAnalytics.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2436 a08b2efceb96a77bd736b86d6010b6d0_NeikiAnalytics.exe