9ddc975f56314f3d95522bc4215cf4af4d58dcffad629bfe031f11363b351215

Analysis

max time kernel
130s
max time network
99s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
15/05/2024, 08:29

Target

aef9fd25c55332dc9f1d1907708a9fb0_NeikiAnalytics.exe
Size

74KB
MD5

aef9fd25c55332dc9f1d1907708a9fb0
SHA1

3c044a3a0cd4d9fd7e197ad6bd2e2a1f17133941
SHA256

9ddc975f56314f3d95522bc4215cf4af4d58dcffad629bfe031f11363b351215
SHA512

d41cf3909bb765e102f2eee812004469a4d5f9734e934e1da7bc6f05c0c7ecad2729a5ee61273facc8e83742f023fcdf6a7a93f493ae34acdbc1e04dc44d5ea5
SSDEEP

1536:1v1Po/bQ+2Ovwd7o7mUj2JB1I32MZ1Rb/NW/Cxjtme1MeJ8:t1PoTQ+2Ovwd7o7m02z1I32MnRzqIf1m

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1808	elfoorux-otix.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\elfoorux-otix.exe	aef9fd25c55332dc9f1d1907708a9fb0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\elfoorux-otix.exe	aef9fd25c55332dc9f1d1907708a9fb0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\aef9fd25c55332dc9f1d1907708a9fb0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\aef9fd25c55332dc9f1d1907708a9fb0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:928
- C:\Windows\SysWOW64\elfoorux-otix.exe
  "C:\Windows\SysWOW64\elfoorux-otix.exe"
  2⤵
  - Executes dropped EXE
  PID:1808

C:\Windows\SysWOW64\elfoorux-otix.exe

Filesize
71KB

MD5
f3697818ead4ba2b5baa309118000623

SHA1
d05060fdaf47b8b64eb77b5e0f50550c8b0ee3ea

SHA256
888ce66836bb93f4e1a8249715818e365ae9e017dd1e326a899e59bd887f1612

SHA512
b3042e1fb219e49d2ac6f13415662434e709aa0c3defcde3aed15f8aa5bd407c1a9b084a3792275c7e92b34ca7905b0cfe518852d8e23533dd611d30ce034f06

Download Submit
memory/928-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download