3b1e7506c45a28babd61d329242a2ef808de225ddd20ae085d4c02819068bb4c

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 12:48

Target
a3f8767120bb53f2c90567dfddc34240_NeikiAnalytics.exe
Size 1.4MB
Sample240603-p16thagd35
SHA256 3b1e7506c45a28babd61d329242a2ef808de225ddd20ae085d4c02819068bb4c
MD5 a3f8767120bb53f2c90567dfddc34240
SHA1 a628b668f7c1ff76b3349bf7a3a877bf5d387f2d
SHA512 9bae7ac7913bd9eb443c93e4d82834e4261889ca79b0ce17766a644a59204df043e15caad45b34ef1f60e20f315fa311534f6b3e871cfc6ad77cc127d0ae1f98
SSDEEP 24576:6/wDRLo/DYxee7xSKTuByhU1+UJxJp52iBFZlQdiei:6/LDi7xSWjG+UJXaAlQA3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2660	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2660	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1160	a3f8767120bb53f2c90567dfddc34240_NeikiAnalytics.exe
1160	a3f8767120bb53f2c90567dfddc34240_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\a3f8767120bb53f2c90567dfddc34240_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\a3f8767120bb53f2c90567dfddc34240_NeikiAnalytics.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1160

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4a8 0x4a4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2660