8474842881bf3726fb6a08ce62b9baa7583557e2c4798ebf9189d26db8f0f39b

Analysis

max time kernel
125s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 00:55

Target

4328829b6df22bc68c60d5431bff8e00_NeikiAnalytics.exe
Size

71KB
MD5

4328829b6df22bc68c60d5431bff8e00
SHA1

425cf68eef879950ebc54f64e4fc1171d42c31c8
SHA256

8474842881bf3726fb6a08ce62b9baa7583557e2c4798ebf9189d26db8f0f39b
SHA512

e189db014311c9d688a8ceb0422fe2a6a5d076382c6e5960e318423d5508a3342e4cb4f462e6e7a8203169d65b7a0de59d67fcc3baacf3f577924e17b587acd6
SSDEEP

768:hZZ6Zyf9TSp3UZvTslPBTEsEaYERSb7B/qm99dV3aTb5shzebLQ/Ud7WK/mS+SAs:17R6Pxu3Vqk9qTbWRe3b9eS+S3

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4508	eabhifix.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\WINDOWS\SysWOW64\eabhifix.exe	4328829b6df22bc68c60d5431bff8e00_NeikiAnalytics.exe
File created	C:\WINDOWS\SysWOW64\eabhifix.exe	4328829b6df22bc68c60d5431bff8e00_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\4328829b6df22bc68c60d5431bff8e00_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\4328829b6df22bc68c60d5431bff8e00_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:1440
- C:\WINDOWS\SysWOW64\eabhifix.exe
  "C:\WINDOWS\system32\eabhifix.exe"
  2⤵
  - Executes dropped EXE
  PID:4508

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4048,i,15140928051103392835,1612840580898364401,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:8
1⤵
PID:1580

C:\Windows\SysWOW64\eabhifix.exe

Filesize
68KB

MD5
07d1609bf7ea45247d18dd0e4bbc7e7c

SHA1
c9024e9c464e12212bfbcb142ccd1348c832c78e

SHA256
473e524e1eaf4c6681555e9d60f167a49050c350dba708ea19b79e5e68073bf0

SHA512
75c15f3fce266b3a5d880813a4178cdc270ba047cb96f99eb5a1f1a8ac2535e96213b23979ff7622265b50c722f39cf64ca0f24dd011e5c6cfdd532cb1dc4acc

Download Submit
memory/1440-3-0x0000000077212000-0x0000000077213000-memory.dmp

Filesize
4KB

Download
memory/1440-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download