1be5b84079e7cea4c9ee9e3e81784fc8c2aba6801e313d98102bf28ae77eacc0

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09/05/2024, 18:51

Target

c90b4f1bb18614c0001e8c0d62f3a3e0_NeikiAnalytics.exe
Size

73KB
MD5

c90b4f1bb18614c0001e8c0d62f3a3e0
SHA1

a60245e8f08e66c0087bd0e37e0edd256a0ad4c8
SHA256

1be5b84079e7cea4c9ee9e3e81784fc8c2aba6801e313d98102bf28ae77eacc0
SHA512

321c3ed262e3064f8e3d7e4b30904b8796e99fe203cb25cecb4d60e1b43316368794ae9ca1906b3aa9322f5101d33c64ff717528503b61d5b37d5fb9d827329f
SSDEEP

1536:1bPd6aXUhvYMwRHoly48kXA9pD9fWZ/bwPsaqPc1KqvV2Va:Ji2Mt8kQ9p9fSbwPEPQ17

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3644	cvootoot-ukum.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\cvootoot-ukum.exe	c90b4f1bb18614c0001e8c0d62f3a3e0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\cvootoot-ukum.exe	c90b4f1bb18614c0001e8c0d62f3a3e0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\c90b4f1bb18614c0001e8c0d62f3a3e0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\c90b4f1bb18614c0001e8c0d62f3a3e0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:4724
- C:\Windows\SysWOW64\cvootoot-ukum.exe
  "C:\Windows\SysWOW64\cvootoot-ukum.exe"
  2⤵
  - Executes dropped EXE
  PID:3644

C:\Windows\SysWOW64\cvootoot-ukum.exe

Filesize
70KB

MD5
86703ca882df335f03698b40dc34273e

SHA1
84f239c5fc9f94fa15a732d2ce7c0e527d8c150e

SHA256
d7f6631698461e3b319346812c5e1e91f50871586853dd4ad44b60a9f24f4d18

SHA512
4184c2f4848c1fe5873412264fc7bf0889c4d5f631a1aeafaa451631c4101ea6ec874e2fa83da0aa066804204d476dc5041c8db805fb71e1b0b403f9c59b2601

Download Submit
memory/4724-3-0x0000000077DB2000-0x0000000077DB3000-memory.dmp

Filesize
4KB

Download
memory/4724-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download