Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28-06-2024 22:00

General

  • Target

    22ada35754706d8dec61e4fb7ac50be34f3eb63f3c4f21141c6bf012f6748241_NeikiAnalytics.exe

  • Size

    605KB

  • MD5

    36e660748c209891b7db99535563a450

  • SHA1

    cfebc496cccc80b1910de050f974a7048fdf09c5

  • SHA256

    22ada35754706d8dec61e4fb7ac50be34f3eb63f3c4f21141c6bf012f6748241

  • SHA512

    bcdd563c6e424ad0b6e7c6987946596932bbb177c69bc36e5079bf29922ee3286687a89338eb133e1b4a574efabccd2c2bf13c6b1ace5b73003865f9ebf2aa68

  • SSDEEP

    12288:HmyndwCg6/xjPHFFBwpRDftD7IBUgbScDQCSkb6wjfRMVviOvf7sibN3A1G31f9:Hme1g6p7HF/w/ftDsBUiScD7WGfWVbvd

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\22ada35754706d8dec61e4fb7ac50be34f3eb63f3c4f21141c6bf012f6748241_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\22ada35754706d8dec61e4fb7ac50be34f3eb63f3c4f21141c6bf012f6748241_NeikiAnalytics.exe"
    1⤵
    • Drops file in System32 directory
    • Suspicious use of AdjustPrivilegeToken
    PID:2792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2792-0-0x0000000000400000-0x000000000049B000-memory.dmp

    Filesize

    620KB

  • memory/2792-1-0x00000000002F0000-0x0000000000357000-memory.dmp

    Filesize

    412KB

  • memory/2792-8-0x00000000002F0000-0x0000000000357000-memory.dmp

    Filesize

    412KB

  • memory/2792-12-0x0000000000400000-0x000000000049B000-memory.dmp

    Filesize

    620KB