09576a7aeb174a82832c6e936bcdbd3aa71f2bc4df8e6fe10aec34e5e97c8bd8

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10/05/2024, 11:03

Target

cc4ac5a4120846534ef884672abec1f0_NeikiAnalytics.exe
Size

73KB
MD5

cc4ac5a4120846534ef884672abec1f0
SHA1

1e6f8cd74f586e1c28456ffdbb63e40b50baec42
SHA256

09576a7aeb174a82832c6e936bcdbd3aa71f2bc4df8e6fe10aec34e5e97c8bd8
SHA512

9a6a94e48f9aa37ca00497c6c8663be2122845f2264fc6d3a32795ed00d529ca1e5481642565c2a5d7a38e9395f609c48da9214d55a9d64bb7a103715ee45563
SSDEEP

768:hZZ6Zyf963pSzouGbBcDZBCtfefzXDDDvFKEWSrVkr93k977l89NSQZyN:1Y3pSzMzwXXD9KErrGnu

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1552	innabak.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\innabak.exe	cc4ac5a4120846534ef884672abec1f0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\innabak.exe	cc4ac5a4120846534ef884672abec1f0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\cc4ac5a4120846534ef884672abec1f0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\cc4ac5a4120846534ef884672abec1f0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:2836
- C:\Windows\SysWOW64\innabak.exe
  "C:\Windows\SysWOW64\innabak.exe"
  2⤵
  - Executes dropped EXE
  PID:1552

C:\Windows\SysWOW64\innabak.exe

Filesize
70KB

MD5
4281052200108b53c328a31c153894c2

SHA1
f655eb249384f248a22177150775bb8a88a67f62

SHA256
1f82b78115b65a96ba4f12c9ff4eeab66c54d20abc4f4df39fa6080014b8005b

SHA512
728f640675d4f0a23151d7beee9fa4703f96836541d544b8bbad2c4153b332dcb3c0b5a84852e0684312c196040c04ad96a7ced4832c9a120070d4f32144d6d3

Download Submit
memory/2836-0-0x0000000077E62000-0x0000000077E63000-memory.dmp

Filesize
4KB

Download
memory/2836-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download