5731999d733e90d37ff2c3e4e7406bc1f17bea1304645e4776db18b566fdcd82

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
17/05/2024, 19:12

Target

1d080af7b0baeaa359ebc1b081d74310_NeikiAnalytics.exe
Size

73KB
MD5

1d080af7b0baeaa359ebc1b081d74310
SHA1

6038f9b33d1c0ed475ba04774c1edad1b987ca76
SHA256

5731999d733e90d37ff2c3e4e7406bc1f17bea1304645e4776db18b566fdcd82
SHA512

40cee2f0b0e0962a8813ec7c13afaa4f80eb0d5dc290a1762e59b0c6d52a9f89022ada8cce6f06106f96c392dc579e9d6a23e54319c0236082c5c3dd56e79a27
SSDEEP

1536:1/5eSd2CGilFul/vKVjb/uNf5Nf8kuHPvIRgHqvvbY:LDavcbUZ8trcE

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2096	kmeakux-eacac.exe

Loads dropped DLL 1 IoCs

pid	Process
1860	1d080af7b0baeaa359ebc1b081d74310_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\kmeakux-eacac.exe	1d080af7b0baeaa359ebc1b081d74310_NeikiAnalytics.exe
File opened for modification	C:\Windows\SysWOW64\kmeakux-eacac.exe	1d080af7b0baeaa359ebc1b081d74310_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\1d080af7b0baeaa359ebc1b081d74310_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\1d080af7b0baeaa359ebc1b081d74310_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1860
- C:\Windows\SysWOW64\kmeakux-eacac.exe
  "C:\Windows\SysWOW64\kmeakux-eacac.exe"
  2⤵
  - Executes dropped EXE
  PID:2096

\Windows\SysWOW64\kmeakux-eacac.exe

Filesize
70KB

MD5
1a5082760e488a66babf11b86a9b2e30

SHA1
d7f0f2dee5ba3423cb0525c8192b5c30ca4830be

SHA256
41d63c59b462a7407f3e4eba3ae1636b8aa211af17c5925bb8358bb53431110d

SHA512
280bd21a42b7d257dffb760b75d4ae29e54c0d43550a06dd5ae80d0b1334c39922ea324f0f1d0ae3c32c62e8288e0684f856781d03c8fdb42bdfd5e072565b59

Download Submit
memory/1860-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download