8f27ef9222df1224958ff0fbe5d2a9d6691c664bf9968e6cd2a747d48cb45cd7

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
15/05/2024, 20:16

Target

2a48c30293f68b9f4d3c5b5ee51246c0_NeikiAnalytics.exe
Size

74KB
MD5

2a48c30293f68b9f4d3c5b5ee51246c0
SHA1

baa2c02239550c255bccc67a9410395b85782fae
SHA256

8f27ef9222df1224958ff0fbe5d2a9d6691c664bf9968e6cd2a747d48cb45cd7
SHA512

ca6448bb76b586951a589219cad273a0fd645906281c5d4b09e3322ce2868c183bf68c1978581dff0b9a7caeabdf7adcba65c433c2221d21305237d3ad31a72e
SSDEEP

768:hZZ6Zyf9SDcnZARkcr07JP9Xdg7SV5bWNy1IMakG98N+hayyyOHoW5iKTNGNXft8:1gDcIJ0JlXuGEUaWMnHcJOVkr19t

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4736	ovfusof.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ovfusof.exe	2a48c30293f68b9f4d3c5b5ee51246c0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ovfusof.exe	2a48c30293f68b9f4d3c5b5ee51246c0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\2a48c30293f68b9f4d3c5b5ee51246c0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\2a48c30293f68b9f4d3c5b5ee51246c0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:3588
- C:\Windows\SysWOW64\ovfusof.exe
  "C:\Windows\SysWOW64\ovfusof.exe"
  2⤵
  - Executes dropped EXE
  PID:4736

C:\Windows\SysWOW64\ovfusof.exe

Filesize
70KB

MD5
bedad6f78c33ecad98c36c0abc1a2ede

SHA1
820b3040f9017561f8bf01077e54b04aca1bf66b

SHA256
021f6d29c983317da7200e9fb8c974143a45760c41742535bc6cbc53950d37b2

SHA512
f43bfc42c154d3ea3025e5ebdda88e938aca365f92d948a829eede9c84f58ca10d7f5bf92c89d78dc5f9762b42d3dc6430a489ed65531c791f968d063c782930

Download Submit
memory/3588-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download
memory/3588-1-0x00000000773E2000-0x00000000773E3000-memory.dmp

Filesize
4KB

Download