Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    02-07-2024 01:25

General

  • Target

    22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462_NeikiAnalytics.exe

  • Size

    5.9MB

  • MD5

    c33e71d23c8bc915bac8e70c39f3a930

  • SHA1

    5826bc9cae78700b301f68449d43387bde2774e7

  • SHA256

    22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462

  • SHA512

    f598e74e2c6bd3ae89a4fe9bac8b05cadfec9d080fc06e6e6c4ebb75d584a3f007630a1f82e7ee578fa7ab20e8a08a79c6713762728a440644d1697e1e824bb1

  • SSDEEP

    98304:jVGSguAD8sdU6W9TxRU0Aud3Lwh68wRebfroRepeaUyPgNxwEV/Vb3ljegRaA1om:jf/M8cwl3Lwh69R0fIFuPwrDd+A1

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\22f47140db34f26f896c3ac4874c17d6acaa4617c8590f25fc475f8a9d2ab462_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2108-0-0x0000000073EBE000-0x0000000073EBF000-memory.dmp
    Filesize

    4KB

  • memory/2108-1-0x0000000000AE0000-0x00000000010C0000-memory.dmp
    Filesize

    5.9MB

  • memory/2108-2-0x0000000073EB0000-0x000000007459E000-memory.dmp
    Filesize

    6.9MB

  • memory/2108-3-0x0000000073EB0000-0x000000007459E000-memory.dmp
    Filesize

    6.9MB