fd00afa743607560e42cebbd6a5c430f80d34d7ea585bc2c8d9a8a436b1a656c

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 23:39

Target

59bd0daca9f45bd54a35fd7345858340_NeikiAnalytics.exe
Size

74KB
MD5

59bd0daca9f45bd54a35fd7345858340
SHA1

cafbc8866475801c2ffa2f9fcbbc0548fa91f90a
SHA256

fd00afa743607560e42cebbd6a5c430f80d34d7ea585bc2c8d9a8a436b1a656c
SHA512

fe98819ff8223c632281b3d9de3075e28d631b81a2eaabbd2c1c99a6fd5baa2e7686d0e5861f80554c34c61927ec6ef2ed1e054861bffa5277165126a15184e8
SSDEEP

768:hZZ6Zyf9TSp3UZvTslPBTEsEaYERSb7B/qm99dV3aTb5shzebLQ/Ud7WK/mS+SAu:17R6Pxu3Vqk9qTbWRe3b9eS+SRo7MUkX

Score

7^/10

Executes dropped EXE 1 IoCs

Processes:

edxomog.exe

pid process

2908 edxomog.exe
Loads dropped DLL 1 IoCs

Processes:

59bd0daca9f45bd54a35fd7345858340_NeikiAnalytics.exe

pid process

1688 59bd0daca9f45bd54a35fd7345858340_NeikiAnalytics.exe

pid	process
2908	edxomog.exe

pid	process
1688	59bd0daca9f45bd54a35fd7345858340_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

Processes:

59bd0daca9f45bd54a35fd7345858340_NeikiAnalytics.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\edxomog.exe	59bd0daca9f45bd54a35fd7345858340_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\edxomog.exe	59bd0daca9f45bd54a35fd7345858340_NeikiAnalytics.exe

C:\Windows\SysWOW64\edxomog.exe
"C:\Windows\SysWOW64\edxomog.exe"
2⤵
- Executes dropped EXE
PID:2908

\Windows\SysWOW64\edxomog.exe
Filesize
71KB

MD5
6a0cb0c1dbce7d8f92a94165a33332ab

SHA1
8d224d803bdf08ac5fb61cf35beeaca421dbd2da

SHA256
04cc5ce1bf3b8da1a186ef8f35742e204a779cc76be64ea5daa8bfda6c2f285f

SHA512
7515384845ac3682d23441360eabb1ab88520942d83cee02cbe5826eda96940c9c6d85cbb1ae4f3551f64e55308c0d70fa28c6a783b6c07a6e8a2bf848cc3614

Download Submit
memory/1688-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download