Analysis

  • max time kernel
    141s
  • max time network
    52s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-06-2024 01:51

General

  • Target

    23315eeff1aaaa973cee3ce590e910f0_NeikiAnalytics.exe

  • Size

    3.3MB

  • MD5

    23315eeff1aaaa973cee3ce590e910f0

  • SHA1

    4568615611c0b014136085b8da7b4addc9dd8cdc

  • SHA256

    5a586d5b020a5b3cb5c10f644de397d95074f429aee31c33a1aa6468e0a6a3dc

  • SHA512

    e246d2fe2bb16539e51b5e1f489bfc8dc3a7a5028d8ca4c026264409906252d479ebbb5a12340ac15993cdeb4fa08f0ba30a39e2bf0daf7d7f1d98467823172c

  • SSDEEP

    98304:exPK8OZZRkfMOYl0u9oUoOe+2ER6mVhPL:exPK828lXuWUDe+xVhT

Score
5/10

Malware Config

Signatures

  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\23315eeff1aaaa973cee3ce590e910f0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\23315eeff1aaaa973cee3ce590e910f0_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    PID:4440

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4440-0-0x00007FF6CB520000-0x00007FF6CC4E4000-memory.dmp

    Filesize

    15.8MB

  • memory/4440-1-0x00007FF428DA0000-0x00007FF429171000-memory.dmp

    Filesize

    3.8MB

  • memory/4440-2-0x00007FF6CB520000-0x00007FF6CC4E4000-memory.dmp

    Filesize

    15.8MB

  • memory/4440-4-0x00007FF428DA0000-0x00007FF429171000-memory.dmp

    Filesize

    3.8MB