91b0997643a2a20e9879e924b4deba8f4621941cfd85c9019b5600dba907d8c0

Analysis

max time kernel
139s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:37

Target

139c817cc28d11bb60f1e5918cf4fca0_NeikiAnalytics.exe
Size

74KB
MD5

139c817cc28d11bb60f1e5918cf4fca0
SHA1

99181affda173f579d19cd10a512dd4d2eca3084
SHA256

91b0997643a2a20e9879e924b4deba8f4621941cfd85c9019b5600dba907d8c0
SHA512

4af55127f1bade2b6ea0a7a2d344f3e3f236ab2191fe4ec1b158b28a4394f36b5499afb522fa97a4e0708f44ac0b6430de832af55050ab9d1d1c924e92582509
SSDEEP

1536:1YF8NLCofRLCg/pdsHT+obdo8Cgzvl4ooofgke253u2Dw:uF+LCofRLCgxSzXo8CgpIo53u2Dw

Score

7^/10

Executes dropped EXE 1 IoCs

Processes:

oulticoav.exe

pid process

932 oulticoav.exe

pid	process
932	oulticoav.exe

Drops file in System32 directory 2 IoCs

Processes:

139c817cc28d11bb60f1e5918cf4fca0_NeikiAnalytics.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\oulticoav.exe	139c817cc28d11bb60f1e5918cf4fca0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\oulticoav.exe	139c817cc28d11bb60f1e5918cf4fca0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\139c817cc28d11bb60f1e5918cf4fca0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\139c817cc28d11bb60f1e5918cf4fca0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:4172

C:\Windows\SysWOW64\oulticoav.exe
"C:\Windows\SysWOW64\oulticoav.exe"
2⤵
- Executes dropped EXE
PID:932

C:\Windows\SysWOW64\oulticoav.exe

Filesize
71KB

MD5
e3a2a4c638521d60d5252d8a8a3d4cb8

SHA1
1adbcb13e84cea3b8bcc3e906af3cb9ac91301ae

SHA256
6edb3987b7d945a1aa261a6c6c3d660c1fcbe023be887b21b17b981ce1695a56

SHA512
d520ab020f3837c5c319871a6f56b11903e4cd80baf4cae16bceef2aff247edabf31d28fa6c8e8c2c1999a23b7237a86c1cd58d3b2515e6a098b3f2418bf94a2

Download Submit
memory/4172-3-0x00000000777C2000-0x00000000777C3000-memory.dmp

Filesize
4KB

Download
memory/4172-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download