Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/06/2024, 15:27
General
-
Target
04ab4dd22aed1a4447fdbe4eaf975b41fd259764286b3ddc7a5a05f483275770_NeikiAnalytics.exe
-
Size
7.0MB
-
MD5
5723972585e13fd3ca9153e791c24f40
-
SHA1
e11a2b6d5195a2473162224a8417873767354f37
-
SHA256
04ab4dd22aed1a4447fdbe4eaf975b41fd259764286b3ddc7a5a05f483275770
-
SHA512
76bb1fd73343c213683c510e001b3aad2b0beb6f5ac53bcafe061046d15469e21f99bc5dc6de7967ad08b74bba89f28c8a9c6f23e101e1aa8b0dadb0cc2030d6
-
SSDEEP
98304:emhd1Urye2dP37o1OGgdjV7wQqZUha5jtSyZIUbn:elWteHgdj2QbaZtliK
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\04ab4dd22aed1a4447fdbe4eaf975b41fd259764286b3ddc7a5a05f483275770_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\04ab4dd22aed1a4447fdbe4eaf975b41fd259764286b3ddc7a5a05f483275770_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\CBD.tmp"C:\Users\Admin\AppData\Local\Temp\CBD.tmp" --splashC:\Users\Admin\AppData\Local\Temp\04ab4dd22aed1a4447fdbe4eaf975b41fd259764286b3ddc7a5a05f483275770_NeikiAnalytics.exe 110D420FEC307FB009A71C90EAE54C6D47DEBE26F1BD3A593AA80F8053D54F38A480C6DC41B1CADAEED65BD0A3E4FCD9D3C5AA67CC065FE40BB49F234B2EC7042⤵
- Deletes itself
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.0MB
MD5bde26848b217ffed3c1cb09a87086572
SHA17e8037f8fa0ce1a17f6f24d63f3eaea669cfaba0
SHA256cd7f9b520d5d7de7863def14c996eb37c4a583ade6579f3e78a342a17bdaa358
SHA512e8565163200ea05263d98d7939019417676f12638050b9ffcbad3b25e5416c8c043c12a57ea33c291f1e2f98b3e3afba20786dfb8b307f4fb81384ac13b3a8a3
-
Filesize
4.3MB
-
Filesize
4.3MB