8e72054a1816f5212be2a7f8aaeb7c0484dd95d57f528750887c1f44f603f19a

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 11:10

Target

797768cee0b72ce4bb09951499bb8660_NEIKI.exe
Size

73KB
MD5

797768cee0b72ce4bb09951499bb8660
SHA1

c2b8e844efaaa710ed1ed08035948fb634964c73
SHA256

8e72054a1816f5212be2a7f8aaeb7c0484dd95d57f528750887c1f44f603f19a
SHA512

16e95d4147578010a13a26c680b0ff8773fb2a7efc3dc96a5a7282f3cf372371fce2d64be71fbd49c038a93aaa1a585de4347414e81ce312a40d176c8c2f173f
SSDEEP

1536:14R9KzUD5X66zFOa2INL0U/zDDiGPsMI7MPeDm5+:2KzAXXzFt2INJ/4MPuq+

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1784	egpoteaf-ousooc.exe

Loads dropped DLL 1 IoCs

pid	Process
1800	797768cee0b72ce4bb09951499bb8660_NEIKI.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\egpoteaf-ousooc.exe	797768cee0b72ce4bb09951499bb8660_NEIKI.exe
File created	C:\Windows\SysWOW64\egpoteaf-ousooc.exe	797768cee0b72ce4bb09951499bb8660_NEIKI.exe

C:\Users\Admin\AppData\Local\Temp\797768cee0b72ce4bb09951499bb8660_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\797768cee0b72ce4bb09951499bb8660_NEIKI.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1800
- C:\Windows\SysWOW64\egpoteaf-ousooc.exe
  "C:\Windows\SysWOW64\egpoteaf-ousooc.exe"
  2⤵
  - Executes dropped EXE
  PID:1784

\Windows\SysWOW64\egpoteaf-ousooc.exe

Filesize
70KB

MD5
c9178059a9fac182bae38164d0610e0b

SHA1
3d0ae7a1ea66b626ecf1767912149604cb1594ae

SHA256
157da7a99b29ac1375c860229daf2c28c7a8f083d0ce05b5c3877d3287e7273a

SHA512
485c617b1d969d272fe94e9127a48719c7129994621dd4dd9710542e38389f0faad19567149868f4bb3c5bd50021f14041a696b1a130aeecc3fcf5589a63559e

Download Submit
memory/1800-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download