Analysis

  • max time kernel
    148s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/05/2024, 02:35

General

  • Target

    5b0f3713b10ad44d995aa9e8ebe69f10_NeikiAnalytics.exe

  • Size

    74KB

  • MD5

    5b0f3713b10ad44d995aa9e8ebe69f10

  • SHA1

    d4fc8e443d697dc39f93e020b6d513a0d84e9550

  • SHA256

    c4d43c320897c642ccf694a81d77e16a03ba8d2b9922c6ade2ba311a7f8402e6

  • SHA512

    2e14140324dc381c3418a1bbac46df58b4f50fdbde2d5607e874580bd008e1ef5988d34e862174f00681167952dc7431c91d2740a45d9e8d5a0e760404405bb1

  • SSDEEP

    1536:1l52iwhqb1tqObPvZkcUbSpx7/wteyNjUq:P0PhqZ/TvZtYSXceKYq

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5b0f3713b10ad44d995aa9e8ebe69f10_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\5b0f3713b10ad44d995aa9e8ebe69f10_NeikiAnalytics.exe"
    1⤵
    • Drops file in System32 directory
    PID:368
    • C:\Windows\SysWOW64\oudfofin-ouxur.exe
      "C:\Windows\SysWOW64\oudfofin-ouxur.exe"
      2⤵
      • Executes dropped EXE
      PID:208

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Windows\SysWOW64\oudfofin-ouxur.exe

          Filesize

          71KB

          MD5

          04769f5da891eedf8505c445121fbdc3

          SHA1

          c9cd5cd9a9adb9fa024df3862c16a28b7a6d4f63

          SHA256

          786613287c75432d73bc20c7bda7444eec4ecb79e9f666486a47990fd76f8730

          SHA512

          8a3cbe594bc06648e5b2566ea2c6d8d7c66dd84fdd07dce18bec2b294bf3ece23427c2afa6c3f14d93e3a6a25938f0b1f82eebb527136d7098790715b11a6baa

        • memory/368-1-0x0000000077322000-0x0000000077323000-memory.dmp

          Filesize

          4KB

        • memory/368-4-0x0000000000400000-0x0000000000403000-memory.dmp

          Filesize

          12KB