a44ffe419e0440e5f002e0888f9748f32a0d3fc4dc70bec0f578d120f1f72359

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
15/05/2024, 05:14

Target

86d37109aaf6e15251a13d49a9cc7520_NeikiAnalytics.exe
Size

74KB
MD5

86d37109aaf6e15251a13d49a9cc7520
SHA1

71472e6d33462e0f4b98de95860c69b6701a0c6e
SHA256

a44ffe419e0440e5f002e0888f9748f32a0d3fc4dc70bec0f578d120f1f72359
SHA512

3a29a2aa6177ff2c0d6015af7cea76927f03ee926d86792213b2b6d6870a12377d82975edd3013446317d301a4d3aa914d1a79d758f11f26ed85a4095b0f3c1b
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2D7:uF+LCofRLCgxSzXo8CgpIo53u2D7

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1756	abxoadex.exe

Loads dropped DLL 1 IoCs

pid	Process
2060	86d37109aaf6e15251a13d49a9cc7520_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\abxoadex.exe	86d37109aaf6e15251a13d49a9cc7520_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\abxoadex.exe	86d37109aaf6e15251a13d49a9cc7520_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\86d37109aaf6e15251a13d49a9cc7520_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\86d37109aaf6e15251a13d49a9cc7520_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2060
- C:\Windows\SysWOW64\abxoadex.exe
  "C:\Windows\SysWOW64\abxoadex.exe"
  2⤵
  - Executes dropped EXE
  PID:1756

\Windows\SysWOW64\abxoadex.exe

Filesize
71KB

MD5
9f08a9647f69745c67075f54355bbe19

SHA1
53ced527558c49d6f97630da470e6a1376b6b5fe

SHA256
ed856f474961153c001739893eb94187f87433ca8856590f1efd2f81e9b92820

SHA512
99fa6693953fc3f426d01d49da2d2b58c4a5c37581b730e92321055aeac7840e8bc32745e31e0372c80115eff19c0e3df80946680d9718d0780ddcab37d03386

Download Submit
memory/2060-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download