5d50b7623b57e14ef5e043ff701661e49aa166beb869798056c689074fe27864

Analysis

max time kernel
150s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2024 15:25

Target

e326e89cc74fc08ad655d2f0975f1430_NeikiAnalytics.exe
Size

221KB
MD5

e326e89cc74fc08ad655d2f0975f1430
SHA1

1786d8959111be6e266cfe9d6d5ba851037701f4
SHA256

5d50b7623b57e14ef5e043ff701661e49aa166beb869798056c689074fe27864
SHA512

6e5723d0994e5fcb99dcbec74bdeee3757ed40106124cae78bd6aea2f85c636af579f8a8883ceda63f10842a72b21af776d190094b24306204b867adf4984664
SSDEEP

3072:hfAIuZAIuYSMjoqtMHfhflixiS2ZQfq6Tl7j66sfmTk3WdK1Z:hfAIuZAIuDMVtM/PQVm6S3WYZ

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2452-0-0x0000000000400000-0x000000000040A000-memory.dmp	upx
behavioral2/memory/2452-7-0x0000000000400000-0x000000000040A000-memory.dmp	upx

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\Zombie.exe	e326e89cc74fc08ad655d2f0975f1430_NeikiAnalytics.exe
File opened for modification	C:\Windows\SysWOW64\Zombie.exe	e326e89cc74fc08ad655d2f0975f1430_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\e326e89cc74fc08ad655d2f0975f1430_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\e326e89cc74fc08ad655d2f0975f1430_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:2452

memory/2452-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2452-7-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download