f1fcf79e73bd0d4517c70253b830d14b6a605a24484ff38a282c88a2b0268acb

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 21:33

Target

2c6f4af5b733115291b2bb8a9a637450_NeikiAnalytics.exe
Size

74KB
MD5

2c6f4af5b733115291b2bb8a9a637450
SHA1

3da8b04c3745af08dd4111435385d91dc6dffc21
SHA256

f1fcf79e73bd0d4517c70253b830d14b6a605a24484ff38a282c88a2b0268acb
SHA512

a540f59d5e859539dfbda00b7b2a87c0797938042980a3038d2ee4d624fb4837c8517440b9d24e03e9ca1e81dcea57ddb05b8aa812546d6a637358a27a7a76c2
SSDEEP

768:hZZ6Zyf9ei1kK4GJrydY8O8oM+9asPW+JXr7QILPcMLopRgVdfbII8CQ7QHt08F8:14K8Y1XVVkgVdrI7Q3FIskXJYW

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2188	psokov.exe

Loads dropped DLL 1 IoCs

pid	Process
1752	2c6f4af5b733115291b2bb8a9a637450_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\psokov.exe	2c6f4af5b733115291b2bb8a9a637450_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\psokov.exe	2c6f4af5b733115291b2bb8a9a637450_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\2c6f4af5b733115291b2bb8a9a637450_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\2c6f4af5b733115291b2bb8a9a637450_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1752
- C:\Windows\SysWOW64\psokov.exe
  "C:\Windows\SysWOW64\psokov.exe"
  2⤵
  - Executes dropped EXE
  PID:2188

\Windows\SysWOW64\psokov.exe

Filesize
70KB

MD5
a91092c1db1f6c818bf4c55aeafda7ae

SHA1
b9d43c5f6a794d9cd3524ac9c8efceaf40545ab6

SHA256
4e4e61036d801f1d3c9a81ba2fc3ebb66c6d807f68910c73446f5ae92a832d45

SHA512
e6c5e96b260d15545e0605876267f4709fa141cb7fbcfebfa3210555bca8ad00f477d1cc2c78272fa457647b08f0f4b11657b03c97a050e8c3cd0fced5e23579

Download Submit
memory/1752-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download