Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
20/06/2024, 07:31
Behavioral task
behavioral1
Sample
4554c8321c58af4cf5492a1400c9666bedd91a645c095a5434d7b57d1fd41f5e_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
4554c8321c58af4cf5492a1400c9666bedd91a645c095a5434d7b57d1fd41f5e_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
4554c8321c58af4cf5492a1400c9666bedd91a645c095a5434d7b57d1fd41f5e_NeikiAnalytics.exe
-
Size
8.7MB
-
MD5
8b55415ba7b8dc6057f052a8426e08e0
-
SHA1
6a6005ece2dd2c1ecaceabbeb8017953f4c4035a
-
SHA256
4554c8321c58af4cf5492a1400c9666bedd91a645c095a5434d7b57d1fd41f5e
-
SHA512
ef50b627f247dcd374f2be3c73c650fdbdfacbae6dd7e2592a8fcce6de17329d24389dcbde8d57476602f4a1bc0d05739f250561e35a70483fb546c060204621
-
SSDEEP
98304:+22222222222222222222222222222222222222222225:x
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2556 svrwsc.exe -
resource yara_rule behavioral1/memory/2176-0-0x0000000000400000-0x000000000042B000-memory.dmp upx behavioral1/files/0x000b000000012280-4.dat upx behavioral1/memory/2556-5-0x0000000000400000-0x000000000042B000-memory.dmp upx -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\svrwsc.exe 4554c8321c58af4cf5492a1400c9666bedd91a645c095a5434d7b57d1fd41f5e_NeikiAnalytics.exe File created C:\Windows\SysWOW64\svrwsc.exe svrwsc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4554c8321c58af4cf5492a1400c9666bedd91a645c095a5434d7b57d1fd41f5e_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\4554c8321c58af4cf5492a1400c9666bedd91a645c095a5434d7b57d1fd41f5e_NeikiAnalytics.exe"1⤵
- Drops file in System32 directory
PID:2176
-
C:\Windows\SysWOW64\svrwsc.exeC:\Windows\SysWOW64\svrwsc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:2556
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9.1MB
MD5653fe5c8942c754fd83df4e6f60d564f
SHA15f24a17ae549af4a22e736cb14cfbaaef9537983
SHA256d2c013a0dff42837725914ba517290b25d9a8614d36683b529ca1c84e47f2b03
SHA512979f28396431a4215489dc8c324cd4925806bc972adebc164e7801a3ac146ebf0d4981dd31b18c14d8a1f37b55eb7c7380e50dc6013f3ecabcc79231a8f09409