Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
19-06-2024 14:30
General
-
Target
c41572b34a2a0bdc769b6e2b6c45d050_NeikiAnalytics.exe
-
Size
223KB
-
MD5
c41572b34a2a0bdc769b6e2b6c45d050
-
SHA1
9a9c62d862b5e8dbf78a59fb077054c2731316f1
-
SHA256
e1c53516ede1b1f3bff13d3103648ccd52bcb962093c06153eacd2132ff36429
-
SHA512
7315ecf622955701b8d06e1a09ceaf789f0bc3760544a448ba5f1924dd964295379d91f1aa4e3ed67a3b46824cb79f3463eb8a06450148bebb9f7c45b85bcaaf
-
SSDEEP
6144:vNcDxu3qErl0KKgLn42bk6adl5HjYbiWd:VcDxQqQ0KKgBbVa3BjLWd
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c41572b34a2a0bdc769b6e2b6c45d050_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\c41572b34a2a0bdc769b6e2b6c45d050_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\c41572b34a2a0bdc769b6e2b6c45d050_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\c41572b34a2a0bdc769b6e2b6c45d050_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
223KB
MD552431aee00d7f913eab82c3cf0809577
SHA1eb9b95111e31894ac84d7db285f659492b9f0f20
SHA256dadf4e8d410f61059454054ba3b8ee7d0675ff06b763df8632aec381bf1d1b84
SHA512cb898461d4a9d460bafa15922c22d6d3407029de59cc7a66b1bba2472ef8d372756a75d857091fe66949d4f8f864def6d8d94ed12420c6d49c97b31753261b43
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
104KB
-
Filesize
280KB
-
Filesize
280KB