9db147f5c7e5628bbbe6bd22479e773050abb61bfb64bb7fc0d86294569f5ca1

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/05/2024, 12:31

Target

e1200dba4676a00f1870121808490f20_NeikiAnalytics.exe
Size

71KB
MD5

e1200dba4676a00f1870121808490f20
SHA1

fc24426928420e605f1c7ad2cd3f8b49ceeaa677
SHA256

9db147f5c7e5628bbbe6bd22479e773050abb61bfb64bb7fc0d86294569f5ca1
SHA512

817b2339fa53b1bb9ce7ad42bba368d909b430af6409a1428eadb255647a500e6244ba7a0ec22349b443d1283f21fb4683aa002f944c4b83e82e83a8806ef06e
SSDEEP

1536:1MpqGp9RWC6TuJqZbaGAFPpLdueBGhd+Y/uPY:WpqGzquJZGCpLQeQr3/uQ

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1612	eatcakim-eageab.exe

Loads dropped DLL 1 IoCs

pid	Process
1924	e1200dba4676a00f1870121808490f20_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\eatcakim-eageab.exe	e1200dba4676a00f1870121808490f20_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\eatcakim-eageab.exe	e1200dba4676a00f1870121808490f20_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\e1200dba4676a00f1870121808490f20_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\e1200dba4676a00f1870121808490f20_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1924
- C:\Windows\SysWOW64\eatcakim-eageab.exe
  "C:\Windows\SysWOW64\eatcakim-eageab.exe"
  2⤵
  - Executes dropped EXE
  PID:1612

\Windows\SysWOW64\eatcakim-eageab.exe

Filesize
68KB

MD5
bb68772c360a600c8870aa6d65259476

SHA1
6e12c87c15ef706113bf995a1c0fedbb4dc56802

SHA256
40baf213796731bca2a3ed02cd486c7e54af2e0e4d878dc564887fc510d5451c

SHA512
0cad79d965a0046c647f2e6bebfb1c7cfc6f0d5d51ebe26aa8d172b377ac6ffc2279b7dd45e08552b1f70ddeba5d4d2c838e9f83c2304026bf46dd13add984c0

Download Submit
memory/1924-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download