1ebc3691f579149e7f24be7b3c53e1cd902348676b11a1e9f594b62b1956e365

Analysis

max time kernel
130s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 00:17

Target

60287db7bf3f83527b390799fe9592b0_NeikiAnalytics.exe
Size

83KB
MD5

60287db7bf3f83527b390799fe9592b0
SHA1

317d96623edd9e90862ea424c59923f30769d592
SHA256

1ebc3691f579149e7f24be7b3c53e1cd902348676b11a1e9f594b62b1956e365
SHA512

11f13e8acc10191c3d56ed2675b05aba26b7fed0970a5a8413ebce2d8d16178f2b22a225ae78486e00740e5b50a63ada0a5937a79680addff1b409af625a23e8
SSDEEP

1536:KHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6k2L5brrU0m/gyZIYFrSYc5T:KHoLde/OgV432UcP39hvF+oIGYc5T

Score

7^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/3956-0-0x0000000000400000-0x0000000000428000-memory.dmp	upx
C:\Windows\Temp\[DiVX] Harry Potter And The Sorcerors Stone Full Downloader.exe	upx
behavioral2/memory/3956-103-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Drops file in Windows directory 1 IoCs

Processes:

60287db7bf3f83527b390799fe9592b0_NeikiAnalytics.exe

description ioc process

File created C:\Windows\driv64.exe 60287db7bf3f83527b390799fe9592b0_NeikiAnalytics.exe

description	ioc	process
File created	C:\Windows\driv64.exe	60287db7bf3f83527b390799fe9592b0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\60287db7bf3f83527b390799fe9592b0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\60287db7bf3f83527b390799fe9592b0_NeikiAnalytics.exe"
1⤵
- Drops file in Windows directory
PID:3956

C:\Windows\Temp\[DiVX] Harry Potter And The Sorcerors Stone Full Downloader.exe

Filesize
83KB

MD5
60287db7bf3f83527b390799fe9592b0

SHA1
317d96623edd9e90862ea424c59923f30769d592

SHA256
1ebc3691f579149e7f24be7b3c53e1cd902348676b11a1e9f594b62b1956e365

SHA512
11f13e8acc10191c3d56ed2675b05aba26b7fed0970a5a8413ebce2d8d16178f2b22a225ae78486e00740e5b50a63ada0a5937a79680addff1b409af625a23e8

Download Submit
memory/3956-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3956-103-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download