507ece4d9e9bfaca95c048182e11cc06f16fd82b978f1a1b21004bf820baefd6

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 13:01

Target

507ece4d9e9bfaca95c048182e11cc06f16fd82b978f1a1b21004bf820baefd6_NeikiAnalytics.exe
Size

74KB
MD5

f104cdf51d6e9c815b3e11cffcca0ca0
SHA1

b7fc57ba7759333441fca8ad3fde5edbc58877ac
SHA256

507ece4d9e9bfaca95c048182e11cc06f16fd82b978f1a1b21004bf820baefd6
SHA512

d80c71f235ddd8be129ddb4fba45cfb5b6986652fa94a1057b47e29d85f0458e191dcc71ee225010fbe6d24e4476dbdf8df7410fef36f2a3ebda587dfb448120
SSDEEP

768:hZZ6Zyf9ei1kK4GJrydY8O8oM+9asPW+JXr7QILPcMLopRgVdfbII8CQ7QHt08F/:14K8Y1XVVkgVdrI7Q3FIskXJ0

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3820	ecmoxix.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\ecmoxix.exe	507ece4d9e9bfaca95c048182e11cc06f16fd82b978f1a1b21004bf820baefd6_NeikiAnalytics.exe
File opened for modification	C:\Windows\SysWOW64\ecmoxix.exe	507ece4d9e9bfaca95c048182e11cc06f16fd82b978f1a1b21004bf820baefd6_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\507ece4d9e9bfaca95c048182e11cc06f16fd82b978f1a1b21004bf820baefd6_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\507ece4d9e9bfaca95c048182e11cc06f16fd82b978f1a1b21004bf820baefd6_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:808
- C:\Windows\SysWOW64\ecmoxix.exe
  "C:\Windows\SysWOW64\ecmoxix.exe"
  2⤵
  - Executes dropped EXE
  PID:3820

C:\Windows\SysWOW64\ecmoxix.exe

Filesize
71KB

MD5
c27d30a8955283f528a5791f4c7dad15

SHA1
8f2bf4a0de31d6b06438d33ab196727126daa10b

SHA256
8c6959db31c07ab890c76ab4cb3832c66d2dbb2eaddfd0e0f7d43463f30cc76d

SHA512
eeb3c027a3df6b19d2122bb248d87752ca98e6be786769afeacdbb82c7f6cc2fa07df817f52b402bbee4f4d08c9bd0d8a44e6549245b3cf8e879e27d89f385d3

Download Submit
memory/808-0-0x00000000771B2000-0x00000000771B3000-memory.dmp

Filesize
4KB

Download
memory/808-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download