1e0ce4eded00ea32eb3555cbd3cd815d02ee79cb9d5728a34d9d7fe91f9395d7

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2024, 05:20

Target

6fe28595900f52eadae217a0ef0e9c20_NeikiAnalytics.exe
Size

74KB
MD5

6fe28595900f52eadae217a0ef0e9c20
SHA1

24009a3db481e8ecbdd9addf10ac9ce635fee89c
SHA256

1e0ce4eded00ea32eb3555cbd3cd815d02ee79cb9d5728a34d9d7fe91f9395d7
SHA512

c830a9c7fa1e4dcd420ad4929447658c20d301ddf6b1f53fea1b73576d77db2f7413f2a8e9d58df522acce69aa86c8517203e14e6c4f44b2a2f94cfed7e88bfb
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2D3NT:uF+LCofRLCgxSzXo8CgpIo53u2D3F

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4280	eahneseac.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\eahneseac.exe	6fe28595900f52eadae217a0ef0e9c20_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\eahneseac.exe	6fe28595900f52eadae217a0ef0e9c20_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\6fe28595900f52eadae217a0ef0e9c20_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\6fe28595900f52eadae217a0ef0e9c20_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:1684
- C:\Windows\SysWOW64\eahneseac.exe
  "C:\Windows\SysWOW64\eahneseac.exe"
  2⤵
  - Executes dropped EXE
  PID:4280

C:\Windows\SysWOW64\eahneseac.exe

Filesize
70KB

MD5
b8250f18df9071ea8abf6343c4df11dc

SHA1
6ed02ea204770878497ae6d8936883717b4edaf7

SHA256
23c1adb18e57a5a0a5c39c7344a6706425d58234e46142a4b03632ba74ce4a00

SHA512
217b209ced75438bd128eb19a6d84c25473058cebb448ad255beb617519a2abb1916413b95aee44fa3355d6ccc85447a3a8d4f8040f05781e43247876984c210

Download Submit
memory/1684-2-0x00000000774E2000-0x00000000774E3000-memory.dmp

Filesize
4KB

Download
memory/1684-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download