Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
29/06/2024, 01:27
General
-
Target
450f56f1755f9cabcda4485bdfc2481ad62f87f5e07cf9302cb7c7776f09134a_NeikiAnalytics.exe
-
Size
213KB
-
MD5
1322871d37c57d4f41901b3c5264d990
-
SHA1
8bb0651841d8c5b6465869f58c2bb2a25f5e9bed
-
SHA256
450f56f1755f9cabcda4485bdfc2481ad62f87f5e07cf9302cb7c7776f09134a
-
SHA512
3334d5b27547ab1753695cf82269a0c5b5f5e01ece1fc5815ab0446c022d63d40390f669fbc8cd6e1e6d662b5568958f22d1f6327209c72594d782e9e5193167
-
SSDEEP
6144:RSg0EugnEUCneJW/KDj5+HqBUdgS7tDH0:RShHUCnUTMlJDH0
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\450f56f1755f9cabcda4485bdfc2481ad62f87f5e07cf9302cb7c7776f09134a_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\450f56f1755f9cabcda4485bdfc2481ad62f87f5e07cf9302cb7c7776f09134a_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\450f56f1755f9cabcda4485bdfc2481ad62f87f5e07cf9302cb7c7776f09134a_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\450f56f1755f9cabcda4485bdfc2481ad62f87f5e07cf9302cb7c7776f09134a_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
213KB
MD51cff0143aa49aa7a202ef72632833cd0
SHA16fa43003a885a2e8b410fb21ab2b749154e3a2a8
SHA2566844c30ad1d532f373b9a565d0cf482f4096d066383e56330cf55dbee4320e75
SHA512408b085a53713f730e417632e1cee6472ee0b9da7e121241a369a574a81402692cb978cb75b1c0acacb5c5b5ad8d3d6083e11177576ce3eb276460612747e279
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
260KB
-
Filesize
104KB
-
Filesize
260KB