6d5ec62641e0125acde9e5f7ee497358c9765e434802f93282e500d9e3d7d97e

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
16/05/2024, 12:08

Target

dddc7332884f9892c7745f51aded2240_NeikiAnalytics.exe
Size

73KB
MD5

dddc7332884f9892c7745f51aded2240
SHA1

f692a180e76ded5ea7d793a172e4eb8778226275
SHA256

6d5ec62641e0125acde9e5f7ee497358c9765e434802f93282e500d9e3d7d97e
SHA512

73bedc7c811a9e8a4cd7ede9938619af0eac4eb41b26a6c2258c58610e1077bad0e0ac063bc820acd4fb1f7f3b2af39f014726971686d031d3cb3e03f574cc6e
SSDEEP

1536:1PME0nJHEleopj5g2X+UuxCQT+fByvWmRjNvNHKIQwoi:xeKn95d+RCQmByH9NJ1

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2204	troarop.exe

Loads dropped DLL 1 IoCs

pid	Process
1600	dddc7332884f9892c7745f51aded2240_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\troarop.exe	dddc7332884f9892c7745f51aded2240_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\troarop.exe	dddc7332884f9892c7745f51aded2240_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\dddc7332884f9892c7745f51aded2240_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\dddc7332884f9892c7745f51aded2240_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1600
- C:\Windows\SysWOW64\troarop.exe
  "C:\Windows\SysWOW64\troarop.exe"
  2⤵
  - Executes dropped EXE
  PID:2204

\Windows\SysWOW64\troarop.exe

Filesize
70KB

MD5
8e89b0efba11aa5c1d8b3d887824a172

SHA1
c7eb01a3d7673ea66b7dd55e0739e54d35bf1353

SHA256
3a7bb806fb643582f81f1a378406799bb8bbe98c2c2d62b1c8533097cef286a4

SHA512
8cc1f386bbdd8c20905a879f1af6a744d0937d0146fc5ec4bb869098aed6c988a53efb7f369060e063a21102a753a27107b9cdba55686711a9b32b05cf7b3003

Download Submit
memory/1600-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download