cf951a8a979287a8cbe4fc878c1e0b1b8e112ac2a94a45e00aefcba99e91038e

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
11-05-2024 06:01

Target

8e83ff50182c6d4aed1a5d16a7273520_NeikiAnalytics.exe
Size

70KB
MD5

8e83ff50182c6d4aed1a5d16a7273520
SHA1

0da394f8c41b456d7ccbe823da28958639409b81
SHA256

cf951a8a979287a8cbe4fc878c1e0b1b8e112ac2a94a45e00aefcba99e91038e
SHA512

2f869e15228ffdbf3c5c8ce32d8e6827adcb81f6940a2480576cacf7648fd7a3fca90597d9d48a3778a9996ff1169c5cb3c339b4396774414d10a62955e6c6a0
SSDEEP

1536:1fGw9y+pAF9LNUK/gYr2yTJfYlNvwn2TerK/bFm9xnos5CuAY:knDUK/g5lNon2ioFm02CuAY

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1964	ahpoamor.exe

Loads dropped DLL 1 IoCs

pid	Process
2364	8e83ff50182c6d4aed1a5d16a7273520_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\WINDOWS\SysWOW64\ahpoamor.exe	8e83ff50182c6d4aed1a5d16a7273520_NeikiAnalytics.exe
File created	C:\WINDOWS\SysWOW64\ahpoamor.exe	8e83ff50182c6d4aed1a5d16a7273520_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\8e83ff50182c6d4aed1a5d16a7273520_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\8e83ff50182c6d4aed1a5d16a7273520_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2364
- C:\WINDOWS\SysWOW64\ahpoamor.exe
  "C:\WINDOWS\SysWOW64\ahpoamor.exe"
  2⤵
  - Executes dropped EXE
  PID:1964

\Windows\SysWOW64\ahpoamor.exe

Filesize
67KB

MD5
1ec9145710c75646d1e83111610b51a0

SHA1
2e5c4e5359c63740877f098e658b23ee8916c0f2

SHA256
c2c834569524f0be8d72a0e3bc96dd2b6686d7363995972e215013c806fc89c0

SHA512
d2b0baf587fb56f93158d1cf8a1c313263840254cf4a4fd75358b2de47b4f02e7d61f4f0878b3d014e8f02b57c80db0c83aa7cc9e746683e3784078caca3bd8d

Download Submit
memory/2364-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download