29d88f2330ba99633523804366fb15c59d21ce89f23d60847f44184c656593b3

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 11:40

Target

0646e515571254e7fd19146a62ca8770_NeikiAnalytics.exe
Size

74KB
MD5

0646e515571254e7fd19146a62ca8770
SHA1

0157bf9692f47f2cbc6736fbb7d9acc191b16bc4
SHA256

29d88f2330ba99633523804366fb15c59d21ce89f23d60847f44184c656593b3
SHA512

340fb69a5123efc9e90fa7d068eec42c2074f298e93fcfab972c3e68bef0ff20d26d160b50d9864836181da57e780c36569b678ab05755d87445dba596d22cfb
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2D7:uF+LCofRLCgxSzXo8CgpIo53u2D7

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2988	outfooter-feab.exe

Loads dropped DLL 1 IoCs

pid	Process
2192	0646e515571254e7fd19146a62ca8770_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\outfooter-feab.exe	0646e515571254e7fd19146a62ca8770_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\outfooter-feab.exe	0646e515571254e7fd19146a62ca8770_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\0646e515571254e7fd19146a62ca8770_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\0646e515571254e7fd19146a62ca8770_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2192
- C:\Windows\SysWOW64\outfooter-feab.exe
  "C:\Windows\SysWOW64\outfooter-feab.exe"
  2⤵
  - Executes dropped EXE
  PID:2988

\Windows\SysWOW64\outfooter-feab.exe

Filesize
71KB

MD5
174d04e5db352d0b34a66e08945f4ddf

SHA1
4ff3dcd1ec4d6d01c5812a748b1a7e87c9a86571

SHA256
e4fccbd205f17363196fba29530eacc825eebf9dbbebbfbad1c1cf51dc336c10

SHA512
dc40f0b45e8739bdedd3f56819f8939ea21c0acb18242e86b4859056c52bcbcfc9c449ba442d88b8865b26b38c3f9f8f37275de6827a98591de5e8f7c2278b51

Download Submit
memory/2192-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download