Analysis
-
max time kernel
51s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24/06/2024, 04:08
Static task
static1
Behavioral task
behavioral1
Sample
3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe
-
Size
3.0MB
-
MD5
8f5b7d25c6ec1c5c7b60a218334d1250
-
SHA1
1034be07ad53597c8ceff75f468a622ee67e3d69
-
SHA256
3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7
-
SHA512
6baca446e46df8c14a48827e6065b5b11f906c3511117e4c1587073e4d31e89ea905747af897a1b1d041c9b45f04ef679640a4f9393c391d0ae2619c0d86bd05
-
SSDEEP
98304:G2cPK8SzPp4NE88c2TnCIII9rWecF7AbGCHQ6A:pCKVEE88c2rIKWe9wl
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 12 IoCs
pid Process 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe -
Suspicious use of SendNotifyMessage 12 IoCs
pid Process 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe 4524 3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3b9bc62397a7f12399a535bc7e87dca537d674565b0c4b0a6c48e58def2fe2a7_NeikiAnalytics.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4524