Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/06/2024, 07:08

General

  • Target

    973db727098f485bd4e7ab3f025d6730_NeikiAnalytics.exe

  • Size

    410KB

  • MD5

    973db727098f485bd4e7ab3f025d6730

  • SHA1

    cf91e4026b80d3eea6f8de70d74cd625f4594269

  • SHA256

    ca18788a9579f22375e6e42d1b2a3e47fb38c83de41ea127b37cb73e6f9bb76c

  • SHA512

    6ea639df1a922d1cc1509354f75b047f260685548006fa0b8c800b6cf6d6f4083ed3d3a4e211c77e2c1508a7f561f1696280956fb7730562940bd903428c1aac

  • SSDEEP

    3072:43c1fP4AJJoVF4+Cf4oWXfOJJgy3VDw7qt9GeHcj0GZPzZ/:iOPj2F4+Cf4oWXfOJJgylDw7qtlQZ

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 51 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\973db727098f485bd4e7ab3f025d6730_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\973db727098f485bd4e7ab3f025d6730_NeikiAnalytics.exe"
    1⤵
    • Loads dropped DLL
    PID:1708

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • \Users\Admin\AppData\Local\Temp\nsj8EAB.tmp\NSISdl.dll

          Filesize

          14KB

          MD5

          254f13dfd61c5b7d2119eb2550491e1d

          SHA1

          5083f6804ee3475f3698ab9e68611b0128e22fd6

          SHA256

          fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28

          SHA512

          fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7