3390497fbfd1dc0a77e350cea939a9d63bf6937fefaee1b056ec820792b1c857

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
16/05/2024, 10:09

Target

d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics.exe
Size

71KB
MD5

d9fb5f4d3d2a73486006054d08521440
SHA1

fe8218eaadf85eb241958b0a061f4d8eab07e4d3
SHA256

3390497fbfd1dc0a77e350cea939a9d63bf6937fefaee1b056ec820792b1c857
SHA512

cfdd8be2226eff2658816679bd0636ae43244b3bec33819c1d792d43ff7047e349f76e2d193a6c019c635cc518f8ff7675779e8dd3574a4218d9a92be90a51e5
SSDEEP

768:hZZ6Zyf9JseFPR3dwG0XD0kfLkctfkx1/pbFuWnJWFwnpmkFzCfxUOxrlpZ+pZk0:1kE3dF0XD0CLX2pbP0ue66aC/NQjD

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2012	ummidoad-acid.exe

Loads dropped DLL 1 IoCs

pid	Process
1728	d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\WINDOWS\SysWOW64\ummidoad-acid.exe	d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics.exe
File opened for modification	C:\WINDOWS\SysWOW64\ummidoad-acid.exe	d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\d9fb5f4d3d2a73486006054d08521440_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1728
- C:\WINDOWS\SysWOW64\ummidoad-acid.exe
  "C:\WINDOWS\system32\ummidoad-acid.exe"
  2⤵
  - Executes dropped EXE
  PID:2012

\Windows\SysWOW64\ummidoad-acid.exe

Filesize
68KB

MD5
199c949fd6185a6027d21613c84d3f8f

SHA1
fcc5a0dfb1672968f91192b10a88603708769655

SHA256
633ff49f1f67a6e465d9420522b4595789945fc5e2512daa2f23c9ef85506d18

SHA512
1b5dae9789070a475dc48f17b88a5d41d561bb4388aa4d9628d89fe875dc3dcebc7124cdd45bcbc40cf7bba651b52af67d2b969549974b45017882b6b6e2b6df

Download Submit
memory/1728-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download