79e538b9f3e1dfa81bfc7cc13026c0bcdb054c67f14ad3f6e07dfc6681800300

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/05/2024, 12:10

Target

31eca28f0b0b7fba4e343daaa1663c20_NeikiAnalytics.exe
Size

73KB
MD5

31eca28f0b0b7fba4e343daaa1663c20
SHA1

3404b26fa59633545657461a17c00dcc1488cbe8
SHA256

79e538b9f3e1dfa81bfc7cc13026c0bcdb054c67f14ad3f6e07dfc6681800300
SHA512

f5ebba708848e1c7ef380ea5d348ba84df06e3a0a613ea055383fe6c4930cb58144b7c975e9b1783c8e48462a94c194711f05aad71fc5369f9b5f4708f14064e
SSDEEP

1536:1wrcZa4V5fH01ZJdlUOIV3js6/XyMgjm6Ul0sYnLwDN6:y6RRH0IVweitm7lXYnEDU

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1728	icloogeat.exe

Loads dropped DLL 1 IoCs

pid	Process
2784	31eca28f0b0b7fba4e343daaa1663c20_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\icloogeat.exe	31eca28f0b0b7fba4e343daaa1663c20_NeikiAnalytics.exe
File opened for modification	C:\Windows\SysWOW64\icloogeat.exe	31eca28f0b0b7fba4e343daaa1663c20_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\31eca28f0b0b7fba4e343daaa1663c20_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\31eca28f0b0b7fba4e343daaa1663c20_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2784
- C:\Windows\SysWOW64\icloogeat.exe
  "C:\Windows\SysWOW64\icloogeat.exe"
  2⤵
  - Executes dropped EXE
  PID:1728

\Windows\SysWOW64\icloogeat.exe

Filesize
70KB

MD5
5171191f0b811bbcb503b0d55874f350

SHA1
5940e9235e4e61353037ad6cae701605648dcc6b

SHA256
f5cd32424d2bb09e482365aaa1a1c23e36ea1d4d00a204b99b337081abb67f3b

SHA512
be874127221f991396cd93554e2119229f427279b4636dbcd22e0e1f5b2a014f35845a7cdc7184ae3dea6fcb9360f029e6f3445dc2d05510844c84c07fdedce3

Download Submit
memory/2784-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download