Overview

overview

7

Static

static

3

0e07579984...cs.exe

windows7-x64

7

0e07579984...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2024, 09:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    0e0757998420b128a9a7320c1fd509e0_NeikiAnalytics.exe
  • Size 6.6MB
  • Sample240610-lvrwlsfd7x
  • SHA256 a7f0afe1166fed7391cf6c1eb9e54d060d44aa4685f565b3e89c309cfce26a84
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 7 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0e0757998420b128a9a7320c1fd509e0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0e0757998420b128a9a7320c1fd509e0_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Users\Admin\AppData\Local\Temp\0e0757998420b128a9a7320c1fd509e0_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\0e0757998420b128a9a7320c1fd509e0_NeikiAnalytics.exe"
      2⤵
      • Loads dropped DLL
      PID:2308

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI17322\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 0ae3ee32f44aaed5389cc36d337d57d0203224fc6808c8a331a12ec4955bb2f4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI17322\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 0bf0f70bd2b599ed0d6c137ce48cf4c419d15ee171f5faeac164e3b853818453
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI17322\api-ms-win-core-localization-l1-2-0.dll
        • Size 14KB
        • SHA256 659f3321f272166f0b079775df0abdaf1bc482d1bcc66f42cae08fde446eb81a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI17322\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 12KB
        • SHA256 c2f296dd8372681c37541b0ca8161b4621037d5318b7b8c5346cf7b8a6e22c3e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python310.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI17322\python310.dll
        • Size 4.3MB
        • SHA256 058925e4bbfcb460a3c00ec824b8390583baef0c780a7c7ff01d43d9eec45f20
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI17322\ucrtbase.dll
        • Size 993KB
        • SHA256 962c50afcb9fbfd0b833e0d2d7c2ba5cb35cd339ecf1c33ddfb349253ff95f36
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path \Users\Admin\AppData\Local\Temp\_MEI17322\api-ms-win-core-timezone-l1-1-0.dll
        • Size 12KB
        • SHA256 64d1ca4ead666023681929d86db26cfd3c70d4b2e521135205a84001d25187db
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download