Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11-06-2024 23:45

General

  • Target

    0dfa4b24ad9aa690954dfa8d8dc87370_NeikiAnalytics.exe

  • Size

    1.2MB

  • MD5

    0dfa4b24ad9aa690954dfa8d8dc87370

  • SHA1

    b692287423502c9349520a8f1be98bcc3a4fc369

  • SHA256

    f9b9f457b6d08bc85e0531ec554db3c6fc269d3748560c31b09c7997b4b29652

  • SHA512

    04453b82031bd9ee15111f42bcd21a52dbb3b68c64ca42380590fbf7567d91c9777663b4e34e4aca58d923ba03c62470d1d9457fd10bf20dc324b031596d3e04

  • SSDEEP

    12288:H+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0/1:oMdIuwe3zfIe7xmvH/

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0dfa4b24ad9aa690954dfa8d8dc87370_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0dfa4b24ad9aa690954dfa8d8dc87370_NeikiAnalytics.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2848-0-0x0000000030000000-0x00000000301D2000-memory.dmp

    Filesize

    1.8MB

  • memory/2848-6-0x0000000001C90000-0x0000000001CF7000-memory.dmp

    Filesize

    412KB

  • memory/2848-1-0x0000000001C90000-0x0000000001CF7000-memory.dmp

    Filesize

    412KB

  • memory/2848-9-0x0000000030001000-0x0000000030002000-memory.dmp

    Filesize

    4KB

  • memory/2848-13-0x0000000030000000-0x00000000301D2000-memory.dmp

    Filesize

    1.8MB