Overview

overview

10

Static

static

10

87a1a69ed3...cs.exe

windows7-x64

7

87a1a69ed3...cs.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    144s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/06/2024, 08:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    87a1a69ed3412dc1e4614934578f264ae3d8dc03c6fe661665757aa29bc46904_NeikiAnalytics.exe

  • Size

    27KB

  • MD5

    9011845689313572bbd3b3ebe98d88f0

  • SHA1

    2a0eea8d00affc7f90968761231fd0df7c41a573

  • SHA256

    87a1a69ed3412dc1e4614934578f264ae3d8dc03c6fe661665757aa29bc46904

  • SHA512

    5c71ef3f694bde7e1feab7fe924e619275b57a1548229736e4ef53cb9a83657b5aa392e8f8fc20d07381ed0a73e9d854223b667f9d367c3a54d32efb1cd670c4

  • SSDEEP

    384:ELPe4c0CyzDGoEXHifpY8eu+uCQP8thFMRAQk93vmhm7UMKmIEecKdbXTzm9bVhD:SPtc0CayIfveuJRA/vMHTi9bD

Score
7/10

Malware Config

Signatures

  • Drops startup file 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 35 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\87a1a69ed3412dc1e4614934578f264ae3d8dc03c6fe661665757aa29bc46904_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\87a1a69ed3412dc1e4614934578f264ae3d8dc03c6fe661665757aa29bc46904_NeikiAnalytics.exe"
    1⤵
    • Drops startup file
    • Suspicious use of AdjustPrivilegeToken
    PID:2192

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2192-0-0x00000000748D1000-0x00000000748D2000-memory.dmp

          Filesize

          4KB

          Download

        • memory/2192-1-0x00000000748D0000-0x0000000074E7B000-memory.dmp

          Filesize

          5.7MB

          Download

        • memory/2192-2-0x00000000748D0000-0x0000000074E7B000-memory.dmp

          Filesize

          5.7MB

          Download

        • memory/2192-5-0x00000000748D0000-0x0000000074E7B000-memory.dmp

          Filesize

          5.7MB

          Download