Analysis
-
max time kernel
143s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
12/06/2024, 04:19
Static task
static1
Behavioral task
behavioral1
Sample
1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe
-
Size
701KB
-
MD5
1ddba5cb3ebdc38fc3bfd81a816047b0
-
SHA1
382dab14cf19e65edcda20736a73812eac44fc8f
-
SHA256
a95278508ebeb724ee0a275e02dc5842892a2bb4d9f1ceb12ce98b1d1ea859ad
-
SHA512
00dd76ea1cb18255ed2d2002dcb80ea83c1daf2c6c1c6f88a18cd56e745658a1bb618bb8f200703883c5fdda917bd1928e1b12fdb3885503bc3121a6c50bc023
-
SSDEEP
12288:L3IOigqJXOy2EkbOdO4ly+Sb7mcH+Gz7fKuNz7hAPzbTDyOgYPorajWJ/giWxXLM:kOilJey2Ekb0laexuNJqb3yOgworajWV
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main 1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch 1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe Set value (str) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" 1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2016 1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe 2016 1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe 2016 1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe 2016 1ddba5cb3ebdc38fc3bfd81a816047b0_NeikiAnalytics.exe