44deca6d11074d440705256067de4a3991dbee895f6c59239cdf8152c3603a17

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 22:21

Target

41ff37baa051a5f86d1ebbd713426d70_NeikiAnalytics.exe
Size

20KB
MD5

41ff37baa051a5f86d1ebbd713426d70
SHA1

b5af058ef84d0579b108d83954f2e8f5b7ccf34e
SHA256

44deca6d11074d440705256067de4a3991dbee895f6c59239cdf8152c3603a17
SHA512

584c84525e534d897523e201c9b9adb8099aa9743322046c2ca403ce16b2e82949441c231ede4e3ca2db79ce3242e685b4867b236acf18b0eed4e76f41373314
SSDEEP

384:5oQ2i7AH6STJqEsnvR//VSsqpmuSNBFCNrY6RPyTGfznJKfsoV7fGW:5oQbS1ABmY0nEkog

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2968	41ff37baa051a5f86d1ebbd713426d70_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\41ff37baa051a5f86d1ebbd713426d70_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\41ff37baa051a5f86d1ebbd713426d70_NeikiAnalytics.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2968

memory/2968-0-0x000000007494E000-0x000000007494F000-memory.dmp

Filesize
4KB

Download
memory/2968-1-0x0000000001100000-0x000000000110C000-memory.dmp

Filesize
48KB

Download
memory/2968-2-0x0000000074940000-0x000000007502E000-memory.dmp

Filesize
6.9MB

Download
memory/2968-3-0x0000000074940000-0x000000007502E000-memory.dmp

Filesize
6.9MB

Download
memory/2968-4-0x0000000074940000-0x000000007502E000-memory.dmp

Filesize
6.9MB

Download