ea0e474a9b6137c7091a6681f3e64d1c3415fd41fc4450ceacdc9fd4807137ab

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 11:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7688f16123b69a5d121c8f192c5c3b40_NeikiAnalytics.exe
Size 1.1MB
Sample240613-m359mszejp
SHA256 ea0e474a9b6137c7091a6681f3e64d1c3415fd41fc4450ceacdc9fd4807137ab
MD5 7688f16123b69a5d121c8f192c5c3b40
SHA1 ac57188fef6876739740a92a2c37579c4d16090c
SHA512 dd9ad99b865e11778467440bef18c7c7813fecd4aa0a5295d090a890f8ef6c0254759c32aa8daee21e60b1513ea4b269b3d32db22b8389ef7bca8274798a6af8
SSDEEP 12288:g6uSzswzh83eptRBBpLUlm5zckVdzfwKcp+fTSUCymNu6sBCYQhkjHvX8IxtjGIw:PW3eptHWezDdrc0TZCymNfYZPX8Itrk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3016	7688f16123b69a5d121c8f192c5c3b40_NeikiAnalytics.exe
3016	7688f16123b69a5d121c8f192c5c3b40_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\7688f16123b69a5d121c8f192c5c3b40_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\7688f16123b69a5d121c8f192c5c3b40_NeikiAnalytics.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

bootstrap_20642.html

Path C:\Users\Admin\AppData\Local\Temp\ish240596890\bootstrap_20642.html
Size 156B
SHA256 f076773a6e3ae0f1cee3c69232779a1aaaf05202db472040c0c8ea4a70af173a
MD5 1ea9e5b417811379e874ad4870d5c51a
SHA1 a4bd01f828454f3619a815dbe5423b181ec4051c
SHA512 965c10d2aa5312602153338da873e8866d2782e0cf633befe5a552b770e08abf47a4d2e007cdef7010c212ebcb9fefea5610c41c7ed1553440eaeab7ddd72daa
MD5 SHA1 SHA512

Submit Download

main.css

Path C:\Users\Admin\AppData\Local\Temp\ish240596890\css\main.css
Size 3KB
SHA256 b9c48aa7afdacf4e33cb475c2d913d4c645c122357c60ffeb22279f5ca669520
MD5 38f8c4d1de4d512dce7a68854e1d779f
SHA1 9681d0f9c4163ea7b4ec9d9ca8f4cb275d4d63ac
SHA512 16a2272e9d30a522b6a398522a28c935c8be7e10faf7e89dabd4f56a234ad6e65e32ff4fee1def75ba0a9fc1d9c9d6511c02f2a24489aba5dd46455077f8bcbb
MD5 SHA1 SHA512

Submit Download

progress-bar.css

Path C:\Users\Admin\AppData\Local\Temp\ish240596890\css\sdk-ui\progress-bar.css
Size 506B
SHA256 974cd89e64bdaa85bf36ed2a50af266d245d781a8139f5b45d7c55a0b0841dda
MD5 5335f1c12201b5f7cf5f8b4f5692e3d1
SHA1 13807a10369f7ff9ab3f9aba18135bccb98bec2d
SHA512 0d4e54d2ffe96ccf548097f7812e3608537b4dae9687816983fddfb73223c196159cc6a39fcdc000784c79b2ced878efbc7a5b5f6e057973bf25b128124510df
MD5 SHA1 SHA512

Submit Download

memory/3016-0-0x0000000000401000-0x00000000004DD000-memory.dmp

Download

memory/3016-53-0x0000000000400000-0x0000000000521000-memory.dmp

Download

memory/3016-111-0x0000000000400000-0x0000000000521000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads