516ae85622555d80bafc2bc9f2a27a37373ebd898e860d406f6338c8ad5a2821

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/05/2024, 00:56

Target

6a065a125c867d7dfb6a6d3d18929460_NeikiAnalytics.exe
Size

73KB
MD5

6a065a125c867d7dfb6a6d3d18929460
SHA1

dae1d5dbb37f97272e0d5d21b41aa973f12b08b8
SHA256

516ae85622555d80bafc2bc9f2a27a37373ebd898e860d406f6338c8ad5a2821
SHA512

3c574e9219aad75f0e9a45176fd242cf4458cdfb03fe677d40316e4f0bf5f4287baed13bf5b5e8e76fb8c91ec249e65701db457a83b73a8a87c4a2d618ffe90f
SSDEEP

1536:1JoSST4YsYpWvd5cvWU11m+b8gkIOUlzt9rerEAw:n1S6jvCJ9QIrberhw

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2872	eddicoah-ucum.exe

Loads dropped DLL 1 IoCs

pid	Process
2160	6a065a125c867d7dfb6a6d3d18929460_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\eddicoah-ucum.exe	6a065a125c867d7dfb6a6d3d18929460_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\eddicoah-ucum.exe	6a065a125c867d7dfb6a6d3d18929460_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\6a065a125c867d7dfb6a6d3d18929460_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\6a065a125c867d7dfb6a6d3d18929460_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2160
- C:\Windows\SysWOW64\eddicoah-ucum.exe
  "C:\Windows\SysWOW64\eddicoah-ucum.exe"
  2⤵
  - Executes dropped EXE
  PID:2872

\Windows\SysWOW64\eddicoah-ucum.exe

Filesize
70KB

MD5
16fe9f75d96e8aa4bed27ada1304f4e4

SHA1
7f25b7a4d7dc843b339e553257aa69f58fd6d54a

SHA256
ee6e4d3f813d8e8b2f588f5f360635cde14205df0204c2b7cb4dd55f2f3ac3ca

SHA512
96b4f4a77eae239bb78c1a92d80d737c4d8c270b416afd5c7e2f2d642c3d1ffbb172d0859f4d4d371ac0d5ad773f8476fa7519594d798b6c08ce9ca83f4385e9

Download Submit
memory/2160-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download