Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
- submitted
03/06/2024, 15:43
General
- Target a68083faac387ac32515bb7863f3f930_NeikiAnalytics.exe
- Size 2.2MB
- Sample240603-s5x9psbc2w
- SHA256 afdf9ebb1377512d21a798dd2b1952d5774a4255b0222a65184996f2e582b2f3
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
- UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Drops file in System32 directory 2 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a68083faac387ac32515bb7863f3f930_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\a68083faac387ac32515bb7863f3f930_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
ESPI11.dll
memory/3200-29-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-7-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-33-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-31-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-46-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-1-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-52-0x0000000002B70000-0x0000000002CC7000-memory.dmp
memory/3200-45-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-44-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-41-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-38-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-0-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-11-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-27-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-18-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-39-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-21-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-19-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-23-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-15-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-13-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-9-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-25-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-5-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-4-0x0000000010000000-0x000000001003F000-memory.dmp
memory/3200-2-0x0000000010000000-0x000000001003F000-memory.dmp