74a0e6603b931fb18e1891c26f567992817c581f6a74b36dd23cb01b3ff26845

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2024, 01:07

Target

545f86c3a817abd62d91defc71d745c0_NeikiAnalytics.exe
Size

74KB
MD5

545f86c3a817abd62d91defc71d745c0
SHA1

5b550d85e3fd2e07b2db87f563538187d1d73e08
SHA256

74a0e6603b931fb18e1891c26f567992817c581f6a74b36dd23cb01b3ff26845
SHA512

6cf91ab46405af1921f2c7442d3ea1771f851748ea4c7f046b0f10b25d7e80994c3b7d964aadfc8db03a7db4efea78cf63f0eae75e11048e391d50214d0664c5
SSDEEP

768:hZZ6Zyf9SDcnZARkcr07JP9Xdg7SV5bWNy1IMakG98N+hayyyOHoW5iKTNGNXftv:1gDcIJ0JlXuGEUaWMnHcJOVkr19w

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4356	ingitood-ufed.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ingitood-ufed.exe	545f86c3a817abd62d91defc71d745c0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ingitood-ufed.exe	545f86c3a817abd62d91defc71d745c0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\545f86c3a817abd62d91defc71d745c0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\545f86c3a817abd62d91defc71d745c0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:4412
- C:\Windows\SysWOW64\ingitood-ufed.exe
  "C:\Windows\SysWOW64\ingitood-ufed.exe"
  2⤵
  - Executes dropped EXE
  PID:4356

C:\Windows\SysWOW64\ingitood-ufed.exe

Filesize
70KB

MD5
ff9b9711dff42a7a58c884ff8c1d7605

SHA1
5dd5b0ca52ba763f6c86bf1cc06c37175b6624bf

SHA256
aea404200baddd9e1cf0ddee595024a0df1a476e7153f59540086000b1c2f565

SHA512
5b942a29bfbc4eaf8d678df11a4d3598f49db34abdeb2256d6fd2022d2d13ba0b40c6c61d163f1b9e655f7199384f72c51abe8f7eb6c316dd6ae5101cf0e9e0a

Download Submit
memory/4412-1-0x0000000077D82000-0x0000000077D83000-memory.dmp

Filesize
4KB

Download
memory/4412-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download