e95290a6ae462fbc86c40ec13dac132e7c56dbf8ec77b5ead5b9653386fd81a3

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
17/05/2024, 20:14

Target

298fc7052334eede987b395f61908200_NeikiAnalytics.exe
Size

73KB
MD5

298fc7052334eede987b395f61908200
SHA1

1a5c78958e187d6b40a9e174fe6f6c026f0c9708
SHA256

e95290a6ae462fbc86c40ec13dac132e7c56dbf8ec77b5ead5b9653386fd81a3
SHA512

089431c37b393452123dcb7af15857025b1f4c697806261ba3da5e5a340878b8340aaf2c0d6f116a98df8a6a096dfc085d9618f198e65e2e783d06df1d1ea533
SSDEEP

1536:13KBnQAAya0fCCZQvG+PNqnD0VaEoESg4uAlZ:C5dDEkCSg4uA

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2228	ibgehes.exe

Loads dropped DLL 1 IoCs

pid	Process
3028	298fc7052334eede987b395f61908200_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ibgehes.exe	298fc7052334eede987b395f61908200_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ibgehes.exe	298fc7052334eede987b395f61908200_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\298fc7052334eede987b395f61908200_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\298fc7052334eede987b395f61908200_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:3028
- C:\Windows\SysWOW64\ibgehes.exe
  "C:\Windows\SysWOW64\ibgehes.exe"
  2⤵
  - Executes dropped EXE
  PID:2228

\Windows\SysWOW64\ibgehes.exe

Filesize
70KB

MD5
56682616a9089f0ca55a35a73c2c3e37

SHA1
88645f7cda8e7fabf998d752b9d8b1e377ce9e1b

SHA256
393683ad1c4d07b8a5d894b6d32cf0157bc857a5431807fa8e104adb18cca182

SHA512
c11e55c486c90bd983962c7bff0cf6049b361d53ff17934e422ab09427eb977446051cdfd8608ce54829b48090ea3ac718e13d0183cdb9a9d918739d4bc8057c

Download Submit
memory/3028-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download