9e2a062cf74e6563001e8e9077bd54e38869301598879272ee134ceaf05317e8

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/05/2024, 18:20

Target

0c07a38b5226012a50d1cfae17644120_NeikiAnalytics.exe
Size

74KB
MD5

0c07a38b5226012a50d1cfae17644120
SHA1

07c009c825238f40595fa1762cf226c5276cca20
SHA256

9e2a062cf74e6563001e8e9077bd54e38869301598879272ee134ceaf05317e8
SHA512

7ce7e4f20ec2e370dcb7b58a7af76feb5cfd08398bbb27dbf93f8f054e82a386d129142e01b4e1384907ff4b39793a5b4ae831be9c70235db051633c05738805
SSDEEP

1536:1d80j8XBulvaVEm+odQpNjoCj2HileSpnt7xQaZUnCZgKQA4:X8qD96xdKoCj2HioSpnt7xQaZUPA4

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2840	ustoobeh-ucoab.exe

Loads dropped DLL 1 IoCs

pid	Process
2196	0c07a38b5226012a50d1cfae17644120_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ustoobeh-ucoab.exe	0c07a38b5226012a50d1cfae17644120_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ustoobeh-ucoab.exe	0c07a38b5226012a50d1cfae17644120_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\0c07a38b5226012a50d1cfae17644120_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\0c07a38b5226012a50d1cfae17644120_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2196
- C:\Windows\SysWOW64\ustoobeh-ucoab.exe
  "C:\Windows\SysWOW64\ustoobeh-ucoab.exe"
  2⤵
  - Executes dropped EXE
  PID:2840

\Windows\SysWOW64\ustoobeh-ucoab.exe

Filesize
71KB

MD5
bfec749700afeb6d29aede07da9b33ba

SHA1
f18302260470b13433ab33e53a9b124d35ce2281

SHA256
521fdbfee95b4571119f99d990c193260edc8a50970881b961a365318a2839f6

SHA512
6a8058c258e61c43f7abe3ac5936220c305d6ea5b36cb80815b842fbde0db8d6e6450786b2dff20f63f4d4515cec1836748fe855ecf6b148860a577c0e206412

Download Submit
memory/2196-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download