Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
20/06/2024, 07:34
General
-
Target
4577e5b10b7d2f011941fc774810877b71ef4d205e937125904c73e98aa988ab_NeikiAnalytics.exe
-
Size
197KB
-
MD5
f8f9231eb67171202ee9f8651878a7f0
-
SHA1
8227c5989584749011a1d109b287fe967b3f73a3
-
SHA256
4577e5b10b7d2f011941fc774810877b71ef4d205e937125904c73e98aa988ab
-
SHA512
def10153836ed32c381f3ec861a64b85e5e36eaf0e69323364710c21e00c531b069c0f2a241e7f849c1b8ecbb4a19300a724269e6a1d7e4943d3b9d93b860e18
-
SSDEEP
3072:wNh5AI5M+6xpfXVfPSjqOMTlj/UOv2qHDDK/YA:wNh5AVZ7fXVnSCUOdHDm
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4577e5b10b7d2f011941fc774810877b71ef4d205e937125904c73e98aa988ab_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\4577e5b10b7d2f011941fc774810877b71ef4d205e937125904c73e98aa988ab_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4577e5b10b7d2f011941fc774810877b71ef4d205e937125904c73e98aa988ab_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\4577e5b10b7d2f011941fc774810877b71ef4d205e937125904c73e98aa988ab_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
197KB
MD5dafcca59fc26c7655078e426663d2920
SHA1540e56b9b7810ab7c9fb2e2b566e63a0a5f8df16
SHA256c7022bc42f87aec5215aede00584ac644f13ee1d3fe1f6a856604ecbb060ed97
SHA51262bdcca911bd097d684d404fd4370e1dde0310f7bb61f175a48df49f2f2d1e699c8ff95e9b712cb591070a7772f80b483216627ab2888ddebd78fada6f00c98e
-
Filesize
228KB
-
Filesize
228KB
-
Filesize
104KB
-
Filesize
228KB
-
Filesize
228KB