e27fbea020f84bb3c0102e3e3eff8eb3ff77596d85d3caa3ed12962661d3d6cc

Analysis

max time kernel
94s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
08-05-2024 21:12

Target

5646807a031eaa6ccccc05d86a7f7b90_NEIKI.exe
Size

364KB
MD5

5646807a031eaa6ccccc05d86a7f7b90
SHA1

13fcd14d37edf4c20d9582d5d55a33010a1a9251
SHA256

e27fbea020f84bb3c0102e3e3eff8eb3ff77596d85d3caa3ed12962661d3d6cc
SHA512

c8d2623f9e4b34b04fe649922f66fc7369cae9899b4f25f4882455bd7c3f4955e08594022eada9c24bb7472a1d8623dcaf915c22d2b8d77f5dd3cdb647a2fb88
SSDEEP

3072:J/yXvD2enVN5UkLPp1f5mbUM96Zvx+UZkxvU84xUa4bjRTItEcmHj:J/yfD2Apf04GuvIUZeqJ2jydmHj

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4252	onvmijj.exe

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File created	C:\PROGRA~3\Mozilla\onvmijj.exe	5646807a031eaa6ccccc05d86a7f7b90_NEIKI.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1232	4252	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\5646807a031eaa6ccccc05d86a7f7b90_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\5646807a031eaa6ccccc05d86a7f7b90_NEIKI.exe"
1⤵
- Drops file in Program Files directory
PID:2876

C:\PROGRA~3\Mozilla\onvmijj.exe
C:\PROGRA~3\Mozilla\onvmijj.exe -ibpmpgd
1⤵
- Executes dropped EXE
PID:4252
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4252 -s 452
  2⤵
  - Program crash
  PID:1232

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4252 -ip 4252
1⤵
PID:3088

C:\ProgramData\Mozilla\onvmijj.exe

Filesize
364KB

MD5
ffaeed07fd05692449c2fd1c398425bb

SHA1
dda2f59354f3d0c5a3137bb61793f47970aa9e67

SHA256
1ab332283d7095651531e86d6691530ccb77d3aa6f793c6f96a1e7a9c4e3d90b

SHA512
1b5d214857a635aca4e69f2e8a37ab51cc24083095d29b6b700bb49ff9263f5f815d95c3157b1d619830f9ecb9afe25acba67faf6edd6fd5201396e7a0103194

Download Submit
memory/2876-0-0x00000000020F0000-0x000000000214B000-memory.dmp

Filesize
364KB

Download
memory/2876-1-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/2876-3-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download
memory/2876-5-0x00000000020F0000-0x000000000214B000-memory.dmp

Filesize
364KB

Download
memory/4252-8-0x0000000000400000-0x000000000045B000-memory.dmp

Filesize
364KB

Download