384d60c55d8459a8ac7e03b8b0c31df12785a4cd9375b6deced89fe2d6465807

Analysis

max time kernel
140s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
09-05-2024 18:40

Target

c4ea2150bff96d9f6a840992bc1f75c0_NeikiAnalytics.exe
Size

73KB
MD5

c4ea2150bff96d9f6a840992bc1f75c0
SHA1

85298f55cf85663b49861f1d3bcecf28f6b80d0e
SHA256

384d60c55d8459a8ac7e03b8b0c31df12785a4cd9375b6deced89fe2d6465807
SHA512

181457e2b71e47c060881b4083b80350992a001499b954b5ba4b980eca2c96d44f1a4ae60227d8d370d63fc8182b14408ebe1e74d54a1b5b745a3ded34ba5453
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2E:uF+LCofRLCgxSzXo8CgpIo53u2E

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3516	uxpasav.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\uxpasav.exe	c4ea2150bff96d9f6a840992bc1f75c0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\uxpasav.exe	c4ea2150bff96d9f6a840992bc1f75c0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\c4ea2150bff96d9f6a840992bc1f75c0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\c4ea2150bff96d9f6a840992bc1f75c0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:4368
- C:\Windows\SysWOW64\uxpasav.exe
  "C:\Windows\SysWOW64\uxpasav.exe"
  2⤵
  - Executes dropped EXE
  PID:3516

C:\Windows\SysWOW64\uxpasav.exe

Filesize
70KB

MD5
251a67df2bbc5d7ca3d96b39bc91dbe9

SHA1
4342a953bd6636707ced2a18289d89c796b2a9b7

SHA256
2a9e8156d1a991ca76b8d8cab80335a298be2340e27474ab21bf6939eb85ed6e

SHA512
77bec3d827f39c75a05be14d40b7696d0c76f63300486cad35847b0b3d6ae0d5bfd2514d2a49ffc137eefd8e6e230be2648c906f35e4563fe089d228869d8840

Download Submit
memory/4368-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download