a8f2226419c19b89461ff94b15c71f884d4a20d114ea21584386c3ad7bc3036b

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
19-05-2024 18:53

Target

1b17b0052f3b8b5c181ead5572dce730_NeikiAnalytics.exe
Size

73KB
MD5

1b17b0052f3b8b5c181ead5572dce730
SHA1

c43fde2189a22b7f6fb0c9bafbc7bceaa8ab5de2
SHA256

a8f2226419c19b89461ff94b15c71f884d4a20d114ea21584386c3ad7bc3036b
SHA512

48d8de8a792cc6ffcf84f9a2baa7f2a39fbf636f533f8f380bff8387db872b6b00ab90f0f6113bfb47aa067a7399400cd8edbdd7ad59a577f67b07238f2221fb
SSDEEP

768:hZZ6Zyf9SDcnZARkcr07JP9Xdg7SV5bWNy1IMakG98N+hayyyOHoW5iKTNGNXfts:1gDcIJ0JlXuGEUaWMnHcJOVkrT

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1236	uvmuroab-uceas.exe

Loads dropped DLL 1 IoCs

pid	Process
1548	1b17b0052f3b8b5c181ead5572dce730_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\uvmuroab-uceas.exe	1b17b0052f3b8b5c181ead5572dce730_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\uvmuroab-uceas.exe	1b17b0052f3b8b5c181ead5572dce730_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\1b17b0052f3b8b5c181ead5572dce730_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\1b17b0052f3b8b5c181ead5572dce730_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1548
- C:\Windows\SysWOW64\uvmuroab-uceas.exe
  "C:\Windows\SysWOW64\uvmuroab-uceas.exe"
  2⤵
  - Executes dropped EXE
  PID:1236

\Windows\SysWOW64\uvmuroab-uceas.exe

Filesize
70KB

MD5
3151317cac06d3328a56b39e21a4f234

SHA1
9ab53ac596706d6a72bfad67d3abeac336eb1a62

SHA256
1786874427b562b2d6715ab4211f3d3fe9f7e3f82b2ef3d8c94da33c42d0e14f

SHA512
01ce9e573ee027b0b6e9167da5ddc107e1b600128ec53408a688f1908caeda4d41fd66c1403f3439df1315b1f6412a4b86e0495bc7b1491900a9716da7a3ecb0

Download Submit
memory/1548-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download