ba5ce1421a6cd7ff980210b0c7dc23e283056eee818d9293157e12e53dd2cb72

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04-06-2024 22:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0bd53cadeaa46c7ec6b6677c9e086320_NeikiAnalytics.exe
Size

130KB
MD5

0bd53cadeaa46c7ec6b6677c9e086320
SHA1

55ff57620f7301fc2e82518f0102e065694c030a
SHA256

ba5ce1421a6cd7ff980210b0c7dc23e283056eee818d9293157e12e53dd2cb72
SHA512

7ff836d9d6d7f2ab559413324d1e4072c5d305ce0d2832372f8315351873693e2fbce4472f5bc8745b2f5e3c67800f012325e4ef2b0f0cf097d2c9538332f227
SSDEEP

3072:GidD4f5MIVYKq8xJPoM8whcWvFHSwS/1rfBB1X++ClP8QhFc/wO:LD+LVYImYc2FjqjX4Vp8QHc4O

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1652	0bd53cadeaa46c7ec6b6677c9e086320_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\0bd53cadeaa46c7ec6b6677c9e086320_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\0bd53cadeaa46c7ec6b6677c9e086320_NeikiAnalytics.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1652

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\aiw259406699.ico

Filesize
326B

MD5
4cf7475e76cb7892a79cc4da8dac51a5

SHA1
54bdca44165458ff4095a536a2dce1f5a2f37c2d

SHA256
ea7860c41776b228b3c6e8286a237933c15a015451cdc78de891c1ca86ff080f

SHA512
aab5dbb5f3cc35e80fa9fb9020fcc12d07819c58affe0463275248a808dc0a6b7b410d14d3668f94542db1948db9f5266e406fb9f8769145d09359e9063b0756

Download Submit