1a1ebd117d68d551a92b5a358c34565705375ff7f60bca61c88f5d9032415d32

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 14:28

Target

08dc5adafac4923ff1f1c3539590b570_NeikiAnalytics.exe
Size

73KB
MD5

08dc5adafac4923ff1f1c3539590b570
SHA1

c0b4f59498f9d1f38d0525d2a238e2b4c9979153
SHA256

1a1ebd117d68d551a92b5a358c34565705375ff7f60bca61c88f5d9032415d32
SHA512

e733cf192f3b29d13e69f73a092517cbe1adddbac0696299ff6f5e8e4157495df3738d451b6ddc9711dd8e7d66f07aa68f441e78dea1258e3bd9521287c9d0db
SSDEEP

768:hZZ6Zyf9IsOotoORa9BtsKq59qixs6LD908odASouD/7Vs6U2Y6AdYLSQhOUul8W:1sxd9IKubv9svDzhkiLSQoUulHe+1/j

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2000	ilgafoar-efid.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ilgafoar-efid.exe	08dc5adafac4923ff1f1c3539590b570_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ilgafoar-efid.exe	08dc5adafac4923ff1f1c3539590b570_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\08dc5adafac4923ff1f1c3539590b570_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\08dc5adafac4923ff1f1c3539590b570_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:1372
- C:\Windows\SysWOW64\ilgafoar-efid.exe
  "C:\Windows\SysWOW64\ilgafoar-efid.exe"
  2⤵
  - Executes dropped EXE
  PID:2000

C:\Windows\SysWOW64\ilgafoar-efid.exe

Filesize
70KB

MD5
6cba7bf0c11e1330b554e63c17cff5b7

SHA1
fd90e11629d70f12a8712a5e9b79d965b378e25c

SHA256
c56d4e8139fa1c106463f412495d320c89096341320b4f03faf6b7704a2a6ffa

SHA512
67bd74ac127ade47e6e2b7199a63e497ab91aaec80a746a8c61e47b8f4dae3633122a7dae906741bdd6f0937663d5695637024d984db6f243eda6b43ebeb5eae

Download Submit
memory/1372-2-0x00000000773A2000-0x00000000773A3000-memory.dmp

Filesize
4KB

Download
memory/1372-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download