1937c3f821122b40599fe4715d9ca1a81bd5a3f812a7ec103970a5577ea30b6f

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 12:57

Target

b67017e8c657060f662918a058e1a980_NEIKI.exe
Size

73KB
MD5

b67017e8c657060f662918a058e1a980
SHA1

efbdf6d9e748fcdb183084eff55959e0782904cd
SHA256

1937c3f821122b40599fe4715d9ca1a81bd5a3f812a7ec103970a5577ea30b6f
SHA512

520bbfc52bf98c8d67e0f5ad45c334edd0e079e636ff150beb3c20eac306a5330e78511cc423fe8b3dd80924bb1f8ef1d2d9b219ddf2545437c1be55eea9fd4a
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2EI:uF+LCofRLCgxSzXo8CgpIo53u2F

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1284	alvofut-edid.exe

Loads dropped DLL 1 IoCs

pid	Process
2040	b67017e8c657060f662918a058e1a980_NEIKI.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\alvofut-edid.exe	b67017e8c657060f662918a058e1a980_NEIKI.exe
File created	C:\Windows\SysWOW64\alvofut-edid.exe	b67017e8c657060f662918a058e1a980_NEIKI.exe

C:\Users\Admin\AppData\Local\Temp\b67017e8c657060f662918a058e1a980_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\b67017e8c657060f662918a058e1a980_NEIKI.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2040
- C:\Windows\SysWOW64\alvofut-edid.exe
  "C:\Windows\SysWOW64\alvofut-edid.exe"
  2⤵
  - Executes dropped EXE
  PID:1284

\Windows\SysWOW64\alvofut-edid.exe

Filesize
70KB

MD5
f72e2dc8700080d52ca630b4806dee5c

SHA1
63ee793e2eb81e7fb23d016faf919eaa5dab16a6

SHA256
c9c91dd38aee408e0a6948d0e94afbe4845552834291ce67cddd5b0b3eee29ca

SHA512
fd854a37e02f74a0d0e73041326def5812380cdb953a0f7ad996af82ca16c63dda51d1c79dfb40be9dbf33f9fcdf884bbf05b53d698d623df5fb11d65292f77f

Download Submit
memory/2040-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download