1d14dd2bbc15b7cd9bc5dc6840cc79ed1badc867b2a40a16d9b0bcb51c46c245

Analysis

max time kernel
135s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
16/05/2024, 01:18

Target

6eeea0ffcbc0120a83e901af9c0ed0a0_NeikiAnalytics.exe
Size

73KB
MD5

6eeea0ffcbc0120a83e901af9c0ed0a0
SHA1

2e7b6b4ea6ea5a32d5337ee9e2c31676573cc7b1
SHA256

1d14dd2bbc15b7cd9bc5dc6840cc79ed1badc867b2a40a16d9b0bcb51c46c245
SHA512

614b62ae01657d6b0454c78e53ac3a6e0618830ea850b49efcc65413a3f36b1baf205fe8b2fa5b7c96671852ea70913a7c1391aba8400789a5f4f4ec82f6b3ac
SSDEEP

1536:19vbKy8RoG6nXAHb0b4zyLIU1JheKK6FDiMwe8dBJTv:rbKy8RjQb4on1jeKK6FDiMwe8dBF

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
944	igmookex.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\igmookex.exe	6eeea0ffcbc0120a83e901af9c0ed0a0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\igmookex.exe	6eeea0ffcbc0120a83e901af9c0ed0a0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\6eeea0ffcbc0120a83e901af9c0ed0a0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\6eeea0ffcbc0120a83e901af9c0ed0a0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:4856
- C:\Windows\SysWOW64\igmookex.exe
  "C:\Windows\SysWOW64\igmookex.exe"
  2⤵
  - Executes dropped EXE
  PID:944

C:\Windows\SysWOW64\igmookex.exe

Filesize
70KB

MD5
2d078efe61fede90a80d7d50692dedd4

SHA1
724c21a5a1866806eb5d59db5e2af922af53de9a

SHA256
11b4a96d31e2dec5ec72b3b85a3e8bc9b31a48bb6107579ae39bfa8945fed0f4

SHA512
f80912baab3d275fcf337e68d6cb19fd8446d63789d61a5892e67ef8200ec72269da04b79cff52197bfd9575d090e8fc572f08e28ff57e0fa443a9280c848692

Download Submit
memory/4856-3-0x0000000077D32000-0x0000000077D33000-memory.dmp

Filesize
4KB

Download
memory/4856-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download