Analysis
- max time kernel
141s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2024, 02:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
3 signatures
150 seconds
General
- Target 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe
- Size 2.3MB
- Sample240613-da5b7ssajd
- SHA256 d71f0842a82bb905cbc8abc2baee91ea8bb18c22acbb70a5a6113edbf9d40a84
- MD5 58814872344e4d7d023d0707a6752f00
- SHA1 ff1330b7b61ef197863e7e201a9a684091abac9a
- SHA512 6b4d83f5aec0c069889cb47fe9267025ef4feacc2328d9bb38a89f937604dc81e2a054ce3958b21cdd32d4d7f2c97a60d19d79dd8244e34db274787b24d52276
- SSDEEP 49152:ABFDFIFP1v+Au0zsLB5Sbux3C5yBx97g3MhJZKsM/luPrqkB1lbLorQTD2jaDUL:6FJAvu0kBgbuxS5yj9kMhJZbM/l8rVND
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AutoRun = "C:\\Users\\Admin\\AppData\\Local\\Temp\\58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe" 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe - Suspicious use of FindShellTrayWindow 7 IoCs
pid Process 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe - Suspicious use of SendNotifyMessage 7 IoCs
pid Process 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe 700 58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe