4946b2b5873e0115e3055a12b1ffc2b1c5242fd0d9baeaa3b7149f0dbcb063fa

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15-05-2024 13:36

Target

d46932c193775c99cbd84d4cb01d9bf0_NeikiAnalytics.exe
Size

74KB
MD5

d46932c193775c99cbd84d4cb01d9bf0
SHA1

81c17714fb04151018541b7bc60405767115799a
SHA256

4946b2b5873e0115e3055a12b1ffc2b1c5242fd0d9baeaa3b7149f0dbcb063fa
SHA512

9905000e40df7c76f9ce5b0d95bb3868f42e572a5663be876b4286f0b8c1a7ed10de648b18e889ebe03f8bd6980a585a26eb0c7cd2b4e3ca72ef043ce5a9b983
SSDEEP

1536:1PME0nJHEleopj5g2X+UuxCQT+fByvWmRjNvNHKIQwo+L:xeKn95d+RCQmByH9NJ5

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1724	vleabooh.exe

Loads dropped DLL 1 IoCs

pid	Process
2080	d46932c193775c99cbd84d4cb01d9bf0_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\vleabooh.exe	d46932c193775c99cbd84d4cb01d9bf0_NeikiAnalytics.exe
File opened for modification	C:\Windows\SysWOW64\vleabooh.exe	d46932c193775c99cbd84d4cb01d9bf0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\d46932c193775c99cbd84d4cb01d9bf0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\d46932c193775c99cbd84d4cb01d9bf0_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2080
- C:\Windows\SysWOW64\vleabooh.exe
  "C:\Windows\SysWOW64\vleabooh.exe"
  2⤵
  - Executes dropped EXE
  PID:1724

\Windows\SysWOW64\vleabooh.exe

Filesize
71KB

MD5
4e3cb745a3829e149f76a6a73a5e43a6

SHA1
6c333e244d38cc2f7a401f25216f4b51a4d84c52

SHA256
48c19409c79efdbc800b82ddb3839e2f71c13701e30e4e05145fee3eac7337b6

SHA512
6986a0c25028da314e9f532ceb194e1ebbb5c6a7030a763ccc905d8eab3429e03953eb6f2ba034890c57279ea98056fc6ea3518e207787aadee6e832fb93fc6d

Download Submit
memory/2080-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download