3b1ce07cfa5d2c51876e26add18ad339334eb395747b13782ad3012ce73d60bd

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 03:29

Target

6d830fdf452558f5e001ac7357e04760_NeikiAnalytics.exe
Size

71KB
MD5

6d830fdf452558f5e001ac7357e04760
SHA1

1fb403c3ad67f9007f57a79040cc8bb8e5e5bbee
SHA256

3b1ce07cfa5d2c51876e26add18ad339334eb395747b13782ad3012ce73d60bd
SHA512

9cb20cefeeaa64b167a7829ca6f0a482a0da52b432466da656371924474fc0d1a4b96b1b80dcba46c1c8520cd4796d196589700c39d6716766f26768492bdf0d
SSDEEP

1536:10Qy//HYGZ75/51cnN/sTJMj+wiOAQYcnKfJY4R:fy//d5/514N/QKjiOAjRB

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
5080	icnehom.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\icnehom.exe	6d830fdf452558f5e001ac7357e04760_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\icnehom.exe	6d830fdf452558f5e001ac7357e04760_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\6d830fdf452558f5e001ac7357e04760_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\6d830fdf452558f5e001ac7357e04760_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:5380
- C:\Windows\SysWOW64\icnehom.exe
  "C:\Windows\SysWOW64\icnehom.exe"
  2⤵
  - Executes dropped EXE
  PID:5080

C:\Windows\SysWOW64\icnehom.exe

Filesize
68KB

MD5
b2b154701910920bc0f5dae1dd07440a

SHA1
9d184e9f8846c1dd49612d65006ef5a768811193

SHA256
e8a5b3d48e95f464d471416321974f5ded0ea43512be828335d3a4395b8e9344

SHA512
97d6598b9cd443d9d5674e177a8313193f09b843766673e67e8eef3a9971d95dff2db42959d527f68bacf100e1d3239e1d0b24279274d05dbb3af4d2ed12a156

Download Submit
memory/5380-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download