336a47d8c78c34dd137b4ccbf08e6e1f1290e3f166cbf9efb93043470885f46a

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/05/2024, 02:54

Target

85a86ff7bde0cab10d26425f1ef61b60_NeikiAnalytics.exe
Size

73KB
MD5

85a86ff7bde0cab10d26425f1ef61b60
SHA1

29f40be27bb6df6988d947ad02d5b39de462c0c4
SHA256

336a47d8c78c34dd137b4ccbf08e6e1f1290e3f166cbf9efb93043470885f46a
SHA512

c05ab371cab81825c0194daeb83468bdac4dce4b58c2c1c275d1c52fbc192da94f76b6b058b81c8acb35c726004d799b50112f3f6cc5ef9cb4c5abc7fd2b2646
SSDEEP

1536:1JoSST4YsYpWvd5cvWU11m+b8gkIOUlzt9rerEAn78:n1S6jvCJ9QIrberhY

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2168	udpotof-xum.exe

Loads dropped DLL 1 IoCs

pid	Process
2248	85a86ff7bde0cab10d26425f1ef61b60_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\udpotof-xum.exe	85a86ff7bde0cab10d26425f1ef61b60_NeikiAnalytics.exe
File opened for modification	C:\Windows\SysWOW64\udpotof-xum.exe	85a86ff7bde0cab10d26425f1ef61b60_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\85a86ff7bde0cab10d26425f1ef61b60_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\85a86ff7bde0cab10d26425f1ef61b60_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2248
- C:\Windows\SysWOW64\udpotof-xum.exe
  "C:\Windows\SysWOW64\udpotof-xum.exe"
  2⤵
  - Executes dropped EXE
  PID:2168

\Windows\SysWOW64\udpotof-xum.exe

Filesize
70KB

MD5
583eafe2a467abebc77d6bc8c0a560c0

SHA1
1a93585671dd01c349e3b1d809bff9d712a7e9df

SHA256
04db6235695dce4086df60fa5968a92e91da2147d9cf4c3d87d1f31ec8a95020

SHA512
06e3cd4898c51123a6b5ad4a7f7375c9ab086f882bead45fd5ca982a9a6115926fd2be0d76a0e50560d5987b9aa7fd901030b73084424a99147585d8a75e27f5

Download Submit
memory/2248-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download