Overview

overview

7

Static

static

3

5c8f75a5e7...cs.exe

windows7-x64

7

5c8f75a5e7...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    51s
  • max time network
    55s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/06/2024, 06:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    5c8f75a5e7616592071970fcbf649b60_NeikiAnalytics.exe
  • Size 9.7MB
  • Sample240617-hj4jgsshkj
  • SHA256 c3ce4331a71b98f9966e172e63fd172c6b079783e76fa45ea59e56b7914e41eb
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5c8f75a5e7616592071970fcbf649b60_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\5c8f75a5e7616592071970fcbf649b60_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2484
    • C:\Users\Admin\AppData\Local\Temp\5c8f75a5e7616592071970fcbf649b60_NeikiAnalytics.exe
      "C:\Users\Admin\AppData\Local\Temp\5c8f75a5e7616592071970fcbf649b60_NeikiAnalytics.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:3504

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _imaging.cp38-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\PIL\_imaging.cp38-win_amd64.pyd
        • Size 2.2MB
        • SHA256 a3bff0ef16dec8ad42c9be3d0ea8a60f92f2c6374149b4a52f7776e4f33c8d36
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\VCRUNTIME140.dll
        • Size 91KB
        • SHA256 8ee6b49830436ff3bec9ba89213395427b5535813930489f118721fd3d2d942c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_socket.pyd
        • Size 77KB
        • SHA256 85f200cb9adf0ef97d40b897868f6ad564211d3529f0b6dfe8e04c56a7b832bc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _tkinter.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\_tkinter.pyd
        • Size 64KB
        • SHA256 d7060f9879bf7d897e1a9dbad2fd09913051bfe0fc7af060f894f15eaec77e06
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-console-l1-1-0.dll
        • Size 3KB
        • SHA256 0b58cf08e546e63f33b640b631c7f99a16f481d3703899fc603ee19bc3aaeebb
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-datetime-l1-1-0.dll
        • Size 3KB
        • SHA256 b11e377eb6538027ed9f9b33bbc57aa1b74a2bce36600390fc8d05f5c02ef444
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-debug-l1-1-0.dll
        • Size 3KB
        • SHA256 d2dde6b1af05d13433e4624e9873fbded9ce8282f089bf2663f56ebc5d0ce4f9
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 3KB
        • SHA256 2d405c61559456f51ddb15255f0d600da439d8dea8e7674bb3cb7d56363b1885
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-file-l1-1-0.dll
        • Size 5KB
        • SHA256 e4eb603588cda79b88a4d2163da5ce221dd08492cd8b74fefca8986c5a023aa1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-file-l1-2-0.dll
        • Size 11KB
        • SHA256 0bacb383c16cb9a579c362a2538aabc0f13722dc3d3b1d4554d24de47f6a2cc8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-file-l2-1-0.dll
        • Size 11KB
        • SHA256 cd0c701cb806cdc05fd4376026a63b1164edf8ddeca3b683275b4cbfad60a8ed
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-handle-l1-1-0.dll
        • Size 3KB
        • SHA256 f0ad2e46b3046d4265041fde8b5c4174e30c01c5d561083d9ef3611a046a1e90
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-heap-l1-1-0.dll
        • Size 3KB
        • SHA256 abb512cd4e67f62f55d1319a80f5df127e020b89b799e0f5d8eeb00826dc6b2a
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 3KB
        • SHA256 c9a8ab6223e6d768e357d355abe1f64d7d1d0f4cfbd1846b14e09cf38e11b7b4
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 3KB
        • SHA256 960765eed3ba9d4c8b64d6c9d1d34bf7be696c5e63d8062a4657c7e89f1c061f
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-localization-l1-2-0.dll
        • Size 13KB
        • SHA256 3f787d0e045d41f6202c439079c7aef19d13ac5bb79edf54a5055b90de3853b0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-memory-l1-1-0.dll
        • Size 3KB
        • SHA256 dc679ef368d6d8b7646e6e23e67eef14b4c7f9ba36355c41104a44e9c7735881
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 3KB
        • SHA256 86579f78379e2564a6c506873728545f138ad5ea5608b7709e1923f425a5d839
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 3KB
        • SHA256 78a33d9241312d1cec9cbf3d0ddda22efc349dae0f79cb032af556a96d600cfe
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 4KB
        • SHA256 cd46d6351891520f1ef503dea0cb15e022d9ede5abaaf79a73671223787caae1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 11KB
        • SHA256 ef5fc371bbdd7d2b27e7e9fb61246e190de237fabb208de0c73a6ba392c3903e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-profile-l1-1-0.dll
        • Size 3KB
        • SHA256 c5da4d53fed642a30ea72a35944867381d2993ad2ade21f3e69c1ba6c8d9f262
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 3KB
        • SHA256 b06d2106211dc67f3f6821147f5133ca6cc2649cd51c9857500336b6d6832724
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-string-l1-1-0.dll
        • Size 3KB
        • SHA256 3841fed90f1fee4dbb68a3f99c69198ef457066813082d33b2de92f93393837c
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-synch-l1-1-0.dll
        • Size 4KB
        • SHA256 2ed52c3cb507f4db50bfa0db65a180f9d2c35cf486d0783565c7bb8bac5a24dc
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-synch-l1-2-0.dll
        • Size 11KB
        • SHA256 fe709c7cefedd82c7bfac9c70f2e9dd8571a926ec005477f3a1978721c875518
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 4KB
        • SHA256 886a0e99a8361f34c929186fbfc0d7f6dc2389a9310b1f2ac90364cf8835582d
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-timezone-l1-1-0.dll
        • Size 11KB
        • SHA256 ea42d9023ff676a1d656e4eb6e571fb8d26e0688901977856581968214c8d0e7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-core-util-l1-1-0.dll
        • Size 3KB
        • SHA256 56408406b80288a6209f88f7f344073c1f82efcc18dfd1d230c0b264dfc54477
        • MD5 SHA1 SHA512
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-conio-l1-1-0.dll
        • Size 12KB
        • SHA256 9d7383ad97c6c8d1233b7e692cc4ce39168dc774c50acf99c545216cb9c5f255
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-convert-l1-1-0.dll
        • Size 15KB
        • SHA256 32043f7edd059c818e4c095efc6bdfb23add74ebf3439b1ae0e499986be6633d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-environment-l1-1-0.dll
        • Size 11KB
        • SHA256 4dc2257e893f188c6f5a2a0e4a4c05bec57f473bb24434b21ccee251d7085425
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 13KB
        • SHA256 2ed80e0d8468d52817d318de5756dc3660d8b2a08ddde45f86c899a53866d175
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-heap-l1-1-0.dll
        • Size 12KB
        • SHA256 bb10975c006f02f6b4837784425bcee846899896eb1ebc11373d67f18a62a49a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-locale-l1-1-0.dll
        • Size 11KB
        • SHA256 8798bd021c3234462058510785b752e1b2658da7be559b8cc8f7fcb421a39fbb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-math-l1-1-0.dll
        • Size 20KB
        • SHA256 214271b59e8fa9af76bf967a2c03410b1f9dae1f70daa2dd78bb6fe7176bd3b5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-process-l1-1-0.dll
        • Size 12KB
        • SHA256 153f5e4d65d0744c55df317ab518b9724a04e1ef76803c7f714eb8ac2a067253
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 15KB
        • SHA256 54e0b41fb454922eb541223ff155534dadacef37f7da0f16d5685ba27ae13ef6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 17KB
        • SHA256 156b19feec303b5ea5755969b9e652ed946f46e173f13987fe8ab6ca558b9bcf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-string-l1-1-0.dll
        • Size 17KB
        • SHA256 84c3bf49d25e33f5c2cc0efc73f7beb9791d1e969d5512591ec6cc8e8678e2de
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-time-l1-1-0.dll
        • Size 13KB
        • SHA256 98f2a63522c117aae07bb6527a03d356400fffa3e62b61bc87f698cd6d1bcdc5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\api-ms-win-crt-utility-l1-1-0.dll
        • Size 11KB
        • SHA256 7dfdbe5dbe3b944d1b8d6d722c90877292231508fc6c2bd6730588207230d322
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\base_library.zip
        • Size 824KB
        • SHA256 dbb6ff0ef96b8d93555d669f8f4775a9852156c6b3c1574a4cee4f6d2ad8f975
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\pyexpat.pyd
        • Size 185KB
        • SHA256 07b0a4831cf64ed352b39a4e874babd7cc705ddc42fdca27d699934d2e2a59d4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python38.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\python38.dll
        • Size 4.0MB
        • SHA256 560a6a5f8b7afa99600cc47da26a802c342d7f50ffe23850372f2fcf536cd26f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\select.pyd
        • Size 27KB
        • SHA256 bb81d220db83d5276fccda137d430160b8eafd40f4d92d86ebc718b4dfd555ac
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tcl86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\tcl86t.dll
        • Size 1.6MB
        • SHA256 f650d6bc321bcda3fc3ac3dec3ac4e473fb0b7b68b6c948581bcfc54653e6768
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        auto.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\tcl\auto.tcl
        • Size 20KB
        • SHA256 f385515658832feb75ee4dce5bd53f7f67f2629077b7d049b86a730a49bd0840
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cp1252.enc
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\tcl\encoding\cp1252.enc
        • Size 1KB
        • SHA256 14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0
        • MD5 SHA1 SHA512
        Submit Download

        init.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\tcl\init.tcl
        • Size 23KB
        • SHA256 bc492b19308bc011cfcd321f1e6e65e6239d4eeb620cc02f7e9bf89002511d4a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tclIndex
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\tcl\tclIndex
        • Size 5KB
        • SHA256 abf7d9d1e86de931096c21820bfa4fd70db1f55005d2db4aa674d86200867806
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tk86t.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\tk86t.dll
        • Size 1.4MB
        • SHA256 1a6d0871be2fa7153de22be008a20a5257b721657e6d4b24da8b1f940345d0d5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tk.tcl
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\tk\tk.tcl
        • Size 22KB
        • SHA256 e1067a0668debb2d8e8ec3b7bc1aec3723627649832b20333f9369f28e4dfdbf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI24842\ucrtbase.dll
        • Size 971KB
        • SHA256 e2eb3f31f771bd53a4e9f3954f73771d80020744a37a6e3781cac5fd955b1e9e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download