056145e605d5dc5f4097cd7adf05416f714f4f72b6008051f1c811a28d24cd26

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
11-05-2024 21:32

Target

3cc504c58c908209de56a58a2ac5c7d0_NeikiAnalytics.exe
Size

73KB
MD5

3cc504c58c908209de56a58a2ac5c7d0
SHA1

2693166357abc834493962112a05469bcb432f92
SHA256

056145e605d5dc5f4097cd7adf05416f714f4f72b6008051f1c811a28d24cd26
SHA512

0ef734f3b24053f9713a0ac4fe6f37083f68d60c83db399a701e5c53be07f20e3a5d6c7c06e09805baa405155e0eca4cbc7d0c9c0cec77a4660862c69b7ff84d
SSDEEP

1536:1PME0nJHEleopj5g2X+UuxCQT+fByvWmRjNvNHKIQwoeN:xeKn95d+RCQmByH9NJ9N

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2512	agdehum-oucooc.exe

Loads dropped DLL 1 IoCs

pid	Process
2400	3cc504c58c908209de56a58a2ac5c7d0_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\agdehum-oucooc.exe	3cc504c58c908209de56a58a2ac5c7d0_NeikiAnalytics.exe
File opened for modification	C:\Windows\SysWOW64\agdehum-oucooc.exe	3cc504c58c908209de56a58a2ac5c7d0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\3cc504c58c908209de56a58a2ac5c7d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3cc504c58c908209de56a58a2ac5c7d0_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2400
- C:\Windows\SysWOW64\agdehum-oucooc.exe
  "C:\Windows\SysWOW64\agdehum-oucooc.exe"
  2⤵
  - Executes dropped EXE
  PID:2512

\Windows\SysWOW64\agdehum-oucooc.exe

Filesize
70KB

MD5
98504b1f38bea0ec84b55049ca48fdf7

SHA1
16571e079eb0ca6d862ca419688cdf42bf0b97dc

SHA256
2de5f8c3fd10be75299dc15e1122fd81c7895974c0c05cb67a9daa1504ffca17

SHA512
10c96ebd5281c354fd8c81091a48e6a9b248909af6b6af38eca505c7b79b3691112e82a0f3d738c1707659b8d15c6ee5dab4b43f655f79fe1bbefe99a9a7ab99

Download Submit
memory/2400-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download