a7f8f982ce904578ce10b9d9c68b44593c923cbbed717d9c863ed37a0e41f333

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
14/05/2024, 07:00

Target

9be6984b2f19f51d6371813c996c2140_NeikiAnalytics.exe
Size

73KB
MD5

9be6984b2f19f51d6371813c996c2140
SHA1

4a9763317e5a4fb395f5d71d489cd4d2b71be705
SHA256

a7f8f982ce904578ce10b9d9c68b44593c923cbbed717d9c863ed37a0e41f333
SHA512

5145c33697bcf9041c32a34a6829263f3c6cdafc6470caabae7005177a43b5084f38e7f2b18d13a3697253389ef116b20b683f79d40f4550ff23a690daf53cfa
SSDEEP

768:hZZ6Zyf9SDcnZARkcr07JP9Xdg7SV5bWNy1IMakG98N+hayyyOHoW5iKTNGNXftA:1gDcIJ0JlXuGEUaWMnHcJOVkOy

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2996	amlixoaf-ocix.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\amlixoaf-ocix.exe	9be6984b2f19f51d6371813c996c2140_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\amlixoaf-ocix.exe	9be6984b2f19f51d6371813c996c2140_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\9be6984b2f19f51d6371813c996c2140_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\9be6984b2f19f51d6371813c996c2140_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:2780
- C:\Windows\SysWOW64\amlixoaf-ocix.exe
  "C:\Windows\SysWOW64\amlixoaf-ocix.exe"
  2⤵
  - Executes dropped EXE
  PID:2996

C:\Windows\SysWOW64\amlixoaf-ocix.exe

Filesize
70KB

MD5
af48f8e8679deae1dfc5a5fd90342f13

SHA1
0a69f550d9f3eb58cfc76e140708b8b2fc307a8b

SHA256
391a5004f0be42357734d17c999c636741ca6447da0bedb4946a24823e97b773

SHA512
ebf701f7325359ee6cbe6874d5df7680a8efd0bbf937a7731f29e120d25762452222efb7d97cd0194b107aa1c510d3d2fca64d1d5cbb9845bc2a10a7893fa253

Download Submit
memory/2780-3-0x0000000077A32000-0x0000000077A33000-memory.dmp

Filesize
4KB

Download
memory/2780-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download