Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
07/06/2024, 21:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
3 signatures
150 seconds
General
-
Target
6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe
-
Size
9.3MB
-
MD5
6d78f48e21b42768044dd82af2547140
-
SHA1
c852e5b0b7a1a9ec4b7d489528bc64740d29e321
-
SHA256
efe21ceb6bfdac315f92bbfc088bc5d837c8ebf349aa4bb663f596164ead70cc
-
SHA512
cbcc3daa0d23309464c63058caacc2d93e16caed16caaca8a3a0714d83b17cdf804cecf1b7ea6078eba6c0b1aad2711eb83960d23ff31cfc61ded3a8c99cfc62
-
SSDEEP
196608:gFdQQd8FC0WemyCvPvEr53+09KPr6TorQVFOnS08Ov7blXzz:YdZ0WrjZPlT7
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs
pid Process 4512 6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe 4512 6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe 4512 6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4512 6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe 4512 6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeLoadDriverPrivilege 4512 6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6d78f48e21b42768044dd82af2547140_NeikiAnalytics.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4512