Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 21:31

General

  • Target

    88b2a53cc17567ea85ec96d90c288b70_NeikiAnalytics.exe

  • Size

    1.7MB

  • MD5

    88b2a53cc17567ea85ec96d90c288b70

  • SHA1

    613d83096716cc627943fa682894bd53c8659f90

  • SHA256

    2e5a23120f965c70037183fdc723994f7f3ca114ec6bcb69591aaa893c303c90

  • SHA512

    2d7b4bfee1d0963c0a3f308205c1c8927304a463009f87c1fd2390d9ffc952a7d432940b8e2d75b8e2292045387c12a445f867343811a95eb2373657b784d1f8

  • SSDEEP

    12288:OCEP9Q/Jcui76JvY67VMBNO/aXpXI22+VufvdIOKek1h4TA8bXQJYe:KPsJcui76J17W8CX32+KJNA80T

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\88b2a53cc17567ea85ec96d90c288b70_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\88b2a53cc17567ea85ec96d90c288b70_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2072-0-0x00000000008E0000-0x0000000000940000-memory.dmp

    Filesize

    384KB

  • memory/2072-8-0x0000000140000000-0x00000001401C0000-memory.dmp

    Filesize

    1.8MB

  • memory/2072-10-0x00000000008E0000-0x0000000000940000-memory.dmp

    Filesize

    384KB

  • memory/2072-9-0x00000000008E0000-0x0000000000940000-memory.dmp

    Filesize

    384KB

  • memory/2072-12-0x0000000140000000-0x00000001401C0000-memory.dmp

    Filesize

    1.8MB