e3d6c8a86b368e03fca8a6b9fa52d770816ff0832b536524e600ce89143ade86

Analysis

max time kernel
145s
max time network
115s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07/05/2024, 22:33

Target

52be4ea6110861945c68f589024748e0_NEIKI.exe
Size

70KB
MD5

52be4ea6110861945c68f589024748e0
SHA1

1b2c623b735560773bbed52e2948e7e095afaa2a
SHA256

e3d6c8a86b368e03fca8a6b9fa52d770816ff0832b536524e600ce89143ade86
SHA512

e8c0f7e8242b15a3353393ebb158e5862918f607672d4d2dca737901bd1480d12577fc5403d5d1e7aeb95b990d8029ea0551eafa9e3546b066ab96686931ba7f
SSDEEP

1536:1YF8NLCofRLCg/hdsHT+obdo8Cgzvl4ooofgkeW:uF+LCofRLCgpSzXo8CgpIY

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3316	akcoopep-oucat.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\akcoopep-oucat.exe	52be4ea6110861945c68f589024748e0_NEIKI.exe
File created	C:\Windows\SysWOW64\akcoopep-oucat.exe	52be4ea6110861945c68f589024748e0_NEIKI.exe

C:\Users\Admin\AppData\Local\Temp\52be4ea6110861945c68f589024748e0_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\52be4ea6110861945c68f589024748e0_NEIKI.exe"
1⤵
- Drops file in System32 directory
PID:2768
- C:\Windows\SysWOW64\akcoopep-oucat.exe
  "C:\Windows\SysWOW64\akcoopep-oucat.exe"
  2⤵
  - Executes dropped EXE
  PID:3316

C:\Windows\SysWOW64\akcoopep-oucat.exe

Filesize
67KB

MD5
a0d756a2dec62622e3b7e441a079f501

SHA1
6e39222148515b4dda8a8fc17ea856f17dfc2611

SHA256
c2876619fc0bfce18d8d0321433cd24100220cad6f123bc953a0280bcbdf36ba

SHA512
75e6d062aa570c3ce8fc9a599df0b70a9dd04f8ccaeb17514a7dea63757d8a45c8cc0750de2dc1463dca53dc573d7cf49b6041d062adecd6a94299ad7adbd00e

Download Submit
memory/2768-1-0x00000000779B2000-0x00000000779B3000-memory.dmp

Filesize
4KB

Download
memory/2768-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download