ea35e4ec63427499863bccd014e15a71cb61d28e6a4374c2e8da516d683dcc80

Analysis

max time kernel
144s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 23:46

Target

5b2db275e7f92729ded64d8926d61cc0_NeikiAnalytics.exe
Size

83KB
MD5

5b2db275e7f92729ded64d8926d61cc0
SHA1

9b7e10aa99a17559b682b15fa8b813b2eef234d4
SHA256

ea35e4ec63427499863bccd014e15a71cb61d28e6a4374c2e8da516d683dcc80
SHA512

33739d08357298b0b3c9da576fdb3df68789eaaa56e38d6b039de552f52e27fb74f0ed0597ab4beb7e3861f4a9437bda72213388ed5525954773311b7e530424
SSDEEP

1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+CK:LJ0TAz6Mte4A+aaZx8EnCGVuC

Score

7^/10

upx

UPX packed file 9 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/4964-0-0x0000000000400000-0x000000000042A000-memory.dmp	upx
behavioral2/memory/4964-1-0x0000000000400000-0x000000000042A000-memory.dmp	upx
behavioral2/memory/4964-2-0x0000000000400000-0x000000000042A000-memory.dmp	upx
behavioral2/memory/4964-5-0x0000000000400000-0x000000000042A000-memory.dmp	upx
behavioral2/memory/4964-9-0x0000000000400000-0x000000000042A000-memory.dmp	upx
C:\Users\Admin\AppData\Local\Temp\rifaien2-5Lhw2NG9yIsxBhhd.exe	upx
behavioral2/memory/4964-15-0x0000000000400000-0x000000000042A000-memory.dmp	upx
behavioral2/memory/4964-22-0x0000000000400000-0x000000000042A000-memory.dmp	upx
behavioral2/memory/4964-30-0x0000000000400000-0x000000000042A000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\5b2db275e7f92729ded64d8926d61cc0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\5b2db275e7f92729ded64d8926d61cc0_NeikiAnalytics.exe"
1⤵
PID:4964

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3776 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
1⤵
PID:624

C:\Users\Admin\AppData\Local\Temp\rifaien2-5Lhw2NG9yIsxBhhd.exe

Filesize
83KB

MD5
d3b29763b7e7260a6d3bd7d7324bcccd

SHA1
9d9079e5220132413c0d58e099214363b7087670

SHA256
96a5e65ea95b416c1b29676e61a8b503dc6f80461cf98020ee3b22ec4b76993f

SHA512
63e5c45c4fe0df8a399f4dd39763a35d656bee83c20b3215abb03feb3228cfa02210eb90019fbe69246b8d18560ba4beb3cf2f4a30448b4a9984a79d420670b4

Download Submit
memory/4964-0-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/4964-1-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/4964-2-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/4964-5-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/4964-9-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/4964-15-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/4964-22-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/4964-30-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download