Overview

overview

7

Static

static

3

DesktopNik...64.exe

windows10-2004-x64

7

DesktopNik...64.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    128s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    31/07/2026, 12:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    DesktopNiko_v5_x64.exe
  • Size 246.5MB
  • Sample260731-pd7saaac39
  • SHA256 ca3a4038e6df85ee30d33cf657edbf05c701e20fd338eb53f74d54b5eb20fb77
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 16 IoCs
  • Modifies registry class 1 IoCs
  • Modifies registry key 1 TTPs 1 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DesktopNiko_v5_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\DesktopNiko_v5_x64.exe"
    1⤵
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4312
    • C:\Windows\SYSTEM32\reg.exe
      reg query HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v DesktopNiko /t REG_SZ
      2⤵
      • Modifies registry key
      PID:5072

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Desktop Niko.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\Desktop Niko.dll
        • Size 284KB
        • SHA256 c0d6861f60d692d73e3220ed262c29f12ce8cb4231bfb2b1eea18ff28e03b4ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Concurrent.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\System.Collections.Concurrent.dll
        • Size 270KB
        • SHA256 4e00a1b4696fefc0384d1060b4330ee1321f221b9fa76d84958f954da677d873
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\System.Collections.dll
        • Size 254KB
        • SHA256 574b3a1e5a3e33f0e03ba345f314b356bcb17b2e89563adbbf7551fd6dbd30c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Console.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\System.Console.dll
        • Size 170KB
        • SHA256 d83ad195add85a6c963c54b8f79afdaa30e08cf20649bc283d9500efb0268bfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.TraceSource.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\System.Diagnostics.TraceSource.dll
        • Size 142KB
        • SHA256 5c80463b6ce0c340751454fccfb93bf4eb124a8259dcacae3724e17062096597
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\System.Linq.dll
        • Size 530KB
        • SHA256 01c516324f8d062f57e6a3a32ca48503cacabc8455c304b30c4a49ecc59f20de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Memory.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\System.Memory.dll
        • Size 154KB
        • SHA256 9a3c726a0fd415df68b98c3d0a0b8b60d48aedde12aabd48b7825432f911a2c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\System.Private.CoreLib.dll
        • Size 12.6MB
        • SHA256 2e21e1ad264783854e394ce2afdafc330639af9387a0557025627eb0426253ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.InteropServices.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\System.Runtime.InteropServices.dll
        • Size 94KB
        • SHA256 03426065bed16593440242ff29c625824a4e81c64bccf176edca9497885d4f42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\System.Threading.dll
        • Size 82KB
        • SHA256 82c123cb14b69307bc6437e6cdb2b7d0af7df46fe843533837ba931976188c7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        clrjit.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\clrjit.dll
        • Size 1.7MB
        • SHA256 0d93933ede5f919bcfe353ab01873ac2247ed37e15fc56098216f228394771f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        coreclr.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\coreclr.dll
        • Size 4.8MB
        • SHA256 d9fe4b48656df2a73a1a761c5e6a8d564a6171249f9ac9e5afec79f4f76bf987
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hostfxr.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\hostfxr.dll
        • Size 358KB
        • SHA256 73bfba03fd339413d083dd5f04be7e8d122abc00340be81ed4c40a601a6e00d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hostpolicy.dll
        • Path C:\Users\Admin\AppData\Local\data_Desktop Niko_windows_x86_64\hostpolicy.dll
        • Size 397KB
        • SHA256 0eebe37a299bed18215511fdabcc5bcec364a30f33fd12dca0850634775f23c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4312-256-0x00007FF6EC260000-0x00007FF6ED260000-memory.dmp
        Download