2d6e24723f37d55731dfafe9c4fb1ecdbab9451bfab8d41901224dd7c08952b0

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 19:21

Target

05a0737e4db25e9d4ab3589026b3d7d0_NeikiAnalytics.exe
Size

74KB
MD5

05a0737e4db25e9d4ab3589026b3d7d0
SHA1

d0854d77fa6b907f939f335b7389d1d20a09a576
SHA256

2d6e24723f37d55731dfafe9c4fb1ecdbab9451bfab8d41901224dd7c08952b0
SHA512

1f460b07762e3ab6ef642bd329bb692d99da9623d11e8b580e5dca917bd89f05c604bf497d0d7fac9347ce0df0fa9a5eb53efa767ac64ffe57ee15481fdee5a4
SSDEEP

1536:10Qy//HYGZ75/51cnN/sTJMj+wiOAQYcnKfJYni:fy//d5/514N/QKjiOAjR8i

Score

7^/10

Executes dropped EXE 1 IoCs

Processes:

imsohat.exe

pid process

2532 imsohat.exe

pid	process
2532	imsohat.exe

Drops file in System32 directory 2 IoCs

Processes:

05a0737e4db25e9d4ab3589026b3d7d0_NeikiAnalytics.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\imsohat.exe	05a0737e4db25e9d4ab3589026b3d7d0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\imsohat.exe	05a0737e4db25e9d4ab3589026b3d7d0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\05a0737e4db25e9d4ab3589026b3d7d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\05a0737e4db25e9d4ab3589026b3d7d0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:1392

C:\Windows\SysWOW64\imsohat.exe
"C:\Windows\SysWOW64\imsohat.exe"
2⤵
- Executes dropped EXE
PID:2532

C:\Windows\SysWOW64\imsohat.exe

Filesize
71KB

MD5
a98f3afaac53546da33c5e802812a1ad

SHA1
5146398c67c68a8a372b6a3a13a0aed192a88432

SHA256
bd9e1ea265247b098b276b607aecbc5b55038923b956663c2390d0d98be5568a

SHA512
e296cd432c31d5af234b384c64dacb381349fe3e97f38b61e0df84439d552beb220336085b8166cc6cbbc03b03127c09bc46831dde054f94fb0c7985dedf3940

Download Submit
memory/1392-1-0x0000000077C32000-0x0000000077C33000-memory.dmp

Filesize
4KB

Download
memory/1392-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download