5e64c59fd00139f1bed86ba4a80dc897b945b40278f0431c9ad5528513997cb2

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 00:07

Target

5ea2a00fda8195f94b012a1f45380250_NeikiAnalytics.exe
Size

73KB
MD5

5ea2a00fda8195f94b012a1f45380250
SHA1

b3346c830d30cddde3ab084961af351d4eb0d716
SHA256

5e64c59fd00139f1bed86ba4a80dc897b945b40278f0431c9ad5528513997cb2
SHA512

d15c5db468f7a77839037775c1c3fa3b69f3e70313904621e85e566dfd0c10ec6c1a70397a2786bae502f22cb1502573edf97b1a781c7883e30e3dc8c8a1bb32
SSDEEP

768:hZZ6Zyf9ei1kK4GJrydY8O8oM+9asPW+JXr7QILPcMLopRgVdfbII8CQ7QHt08F+:14K8Y1XVVkgVdrI7Q3FIskXJY3+d

Score

7^/10

Executes dropped EXE 1 IoCs

Processes:

eapsoavoac-eaced.exe

pid process

3628 eapsoavoac-eaced.exe

pid	process
3628	eapsoavoac-eaced.exe

Drops file in System32 directory 2 IoCs

Processes:

5ea2a00fda8195f94b012a1f45380250_NeikiAnalytics.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\eapsoavoac-eaced.exe	5ea2a00fda8195f94b012a1f45380250_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\eapsoavoac-eaced.exe	5ea2a00fda8195f94b012a1f45380250_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\5ea2a00fda8195f94b012a1f45380250_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\5ea2a00fda8195f94b012a1f45380250_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:3092

C:\Windows\SysWOW64\eapsoavoac-eaced.exe
"C:\Windows\SysWOW64\eapsoavoac-eaced.exe"
2⤵
- Executes dropped EXE
PID:3628

C:\Windows\SysWOW64\eapsoavoac-eaced.exe
Filesize
70KB

MD5
d8bf579ccb04f506e4b766e802f776eb

SHA1
8ded6f67cfb945c20b84056800f45c5ffa653ca2

SHA256
913c4b74a4b280e8dbc00f43abcf978474eb567cbc1c52e156307f84514b2e4e

SHA512
9c2ab5155ba51f53d360bf540d7db391d374a1408fefb3d1e1c917bf72ffe955ae0bfe66fdeca1059ceddd45320e460a8d56a22ecf5e830130f5e95baf72cd1f

Download Submit
memory/3092-3-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download