48147ba6ef2dada7b6db6c90258aea2f15e0287e57ed82549b9f20e74d9d65a6

Analysis

max time kernel
136s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
14/05/2024, 02:23

Target

57bdb86bc2a5f213d988c1ce7cdcb480_NeikiAnalytics.exe
Size

74KB
MD5

57bdb86bc2a5f213d988c1ce7cdcb480
SHA1

0f67549b212551e3a6921393f738610940dabcea
SHA256

48147ba6ef2dada7b6db6c90258aea2f15e0287e57ed82549b9f20e74d9d65a6
SHA512

98c4fa598ac4588ebd66fc46659c7679753dcbc3f35069a4ef761f71df3d50b17028d5f0329304c769dd6933a94629128c0592f5b96ac6cb9480458e3bf27b3f
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2H+:uF+LCofRLCgxSzXo8CgpIo53u2H+

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3304	ondoaxax.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ondoaxax.exe	57bdb86bc2a5f213d988c1ce7cdcb480_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ondoaxax.exe	57bdb86bc2a5f213d988c1ce7cdcb480_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\57bdb86bc2a5f213d988c1ce7cdcb480_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\57bdb86bc2a5f213d988c1ce7cdcb480_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:1456
- C:\Windows\SysWOW64\ondoaxax.exe
  "C:\Windows\SysWOW64\ondoaxax.exe"
  2⤵
  - Executes dropped EXE
  PID:3304

C:\Windows\SysWOW64\ondoaxax.exe

Filesize
71KB

MD5
b07c94eced12a39ae3e490d10bfaf871

SHA1
ea2c20721e9864bbde333f1de416fdf7ff8aa704

SHA256
a1e3e86b149e455f1acfb1a6c91659da1058d80e9c3bc12cd4d67fe43ebed316

SHA512
5b2423ecb86444f79ad87c50505158876998d8da37cef55eb91124271563fd22ad572e790d42b761b36ed01ffd8487e10bb429ebd72cf44397a1c7ed0c6dbb55

Download Submit
memory/1456-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download