Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
04-06-2024 21:36
General
-
Target
0727f27067131d306b7ad5b8a07fa590_NeikiAnalytics.exe
-
Size
396KB
-
MD5
0727f27067131d306b7ad5b8a07fa590
-
SHA1
a1d5ede2678b895a2f387390fcc6d33267915e66
-
SHA256
fe086c50462293b2fbd1b919c4d4991bde1f3ba29997ac4825258e9178922e59
-
SHA512
2ee7be461182d4b555c47e8f62738b49a51a6efda04edaba60d4cc2dba463b27ed59ad6418bc2898442943b09a6f99fefc7a204b8d55fd8edd7b6217fd4417a6
-
SSDEEP
12288:EucY53C3C44qbBievYFL461gWO3dQQctdAyATnG:1x+1Q54+gWO2QctdAyAT
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0727f27067131d306b7ad5b8a07fa590_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\0727f27067131d306b7ad5b8a07fa590_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Documentation\parameter.exe"C:\Program Files\Documentation\parameter.exe" "33201"2⤵
- Executes dropped EXE
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
397KB
MD5abae2bb5c8c559acb76cfdb2ba48e909
SHA16d1de59dfb472e5500f7278dda1bb6782f53c4b1
SHA256a56fe25aa3c8556dc62e35c0873aacbf5bb03ca4def4457ce2d1bf3b7b29317b
SHA5120bef6c1c4ed7610465d4e5bb788e4961cf9735240d6d913f733e95e69fe918b8e88897322e9c76e8be6d7b7e1f0bcbb64f47cd703bc7cdfbe9d6765655614e7a