Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
24/06/2024, 07:03
General
-
Target
4d968e98ca19522ebd30fc86d8bc4e8e9817fcf677169920c190525c4b00c63b_NeikiAnalytics.exe
-
Size
209KB
-
MD5
c55106b9b57d5629e828eedc7d71b0a0
-
SHA1
9d88270e81fed21c3a9263c1bfe46a3dddfac0ab
-
SHA256
4d968e98ca19522ebd30fc86d8bc4e8e9817fcf677169920c190525c4b00c63b
-
SHA512
bf9059f36e083fa3750e57bbc0934996ca7ed01f5a900e5de5c1baa9eaa1c612c8adf9c85b2b67793f5e437051c59130df079326d0911a1fcf4ce8f95ac1c02c
-
SSDEEP
6144:N+1LNWxrMSo+urtTc2bgTzh7TnR7LUtfXp:ahWRMSWrtTcXJLUtfp
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4d968e98ca19522ebd30fc86d8bc4e8e9817fcf677169920c190525c4b00c63b_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\4d968e98ca19522ebd30fc86d8bc4e8e9817fcf677169920c190525c4b00c63b_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\4d968e98ca19522ebd30fc86d8bc4e8e9817fcf677169920c190525c4b00c63b_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\4d968e98ca19522ebd30fc86d8bc4e8e9817fcf677169920c190525c4b00c63b_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
209KB
MD504bb89997631805935f2cbbe320290cd
SHA17fa901aa777045dcb58448b65198e4415c58cf93
SHA256f45b3d947c91b5546b793ecf67201da4c75241482f0b73a63fb3a82c1fae9cd5
SHA512dce9f9a0c21221229df03f2f1ee59fa8942c020bafefa854b94fd3cf5a2df24379f70d1d05b3e84143f09f8805e8a018584829b4ad2b995a489cbab2a1760b68
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
104KB
-
Filesize
256KB