Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
02-07-2024 01:25
Static task
static1
Behavioral task
behavioral1
Sample
22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462_NeikiAnalytics.exe
-
Size
5.9MB
-
MD5
c33e71d23c8bc915bac8e70c39f3a930
-
SHA1
5826bc9cae78700b301f68449d43387bde2774e7
-
SHA256
22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462
-
SHA512
f598e74e2c6bd3ae89a4fe9bac8b05cadfec9d080fc06e6e6c4ebb75d584a3f007630a1f82e7ee578fa7ab20e8a08a79c6713762728a440644d1697e1e824bb1
-
SSDEEP
98304:jVGSguAD8sdU6W9TxRU0Aud3Lwh68wRebfroRepeaUyPgNxwEV/Vb3ljegRaA1om:jf/M8cwl3Lwh69R0fIFuPwrDd+A1
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462_NeikiAnalytics.exedescription pid process Token: SeDebugPrivilege 2108 22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462_NeikiAnalytics.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2108-0-0x0000000073EBE000-0x0000000073EBF000-memory.dmpFilesize
4KB
-
memory/2108-1-0x0000000000AE0000-0x00000000010C0000-memory.dmpFilesize
5.9MB
-
memory/2108-2-0x0000000073EB0000-0x000000007459E000-memory.dmpFilesize
6.9MB
-
memory/2108-3-0x0000000073EB0000-0x000000007459E000-memory.dmpFilesize
6.9MB