Analysis
-
max time kernel
143s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
05/06/2024, 03:20
General
-
Target
31dc5f97369194393f65713d63ffc070_NeikiAnalytics.exe
-
Size
102KB
-
MD5
31dc5f97369194393f65713d63ffc070
-
SHA1
d374dff231b99da9981acda571c9136f89ed41fb
-
SHA256
335d352d3fc4b6e96d5a19c92e25029c1cb90b46adc8fbb1eac89c7db765dca3
-
SHA512
c8f0287d7476453ebf579e8714637c23c31cb26ebd29d8be6c5a1a31c23be7b4766937659e47bea5796863a1f041505569a84e3d8e2a4bbe9e8b8a8ad66bb275
-
SSDEEP
3072:ml7ZsSls3zMdS0Q9/je4XXtKXLxVlAr0cAF+Q:27Zs2OodS0Q9/bXXtAxv+
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\31dc5f97369194393f65713d63ffc070_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\31dc5f97369194393f65713d63ffc070_NeikiAnalytics.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
128KB
-
Filesize
5.6MB
-
Filesize
7.7MB
-
Filesize
624KB
-
Filesize
408KB
-
Filesize
7.7MB
-
Filesize
584KB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
7.7MB