6308e8a737a73fd86e24e0bb452096ed231ca68499759192952d056975b1782a

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 18:03

Target

1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe
Size

74KB
MD5

1adc1aec97153f2c8512491d0aeddbe0
SHA1

f291faaab5051655b33dd7dcb2eed21f0a339e33
SHA256

6308e8a737a73fd86e24e0bb452096ed231ca68499759192952d056975b1782a
SHA512

12177391fee66c2ac13f8741e6e704886719a72e9b9aa376876cc5373801f49b39a6b1a453ebc6b3b099c552f7134a295657d090721a78f92d80d514844caed9
SSDEEP

1536:1PME0nJHEleopj5g2X+UuxCQT+fByvWmRjNvNHKIQwo+ggY:xeKn95d+RCQmByH9NJygY

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1548	ouspipeaf-exoas.exe

Loads dropped DLL 1 IoCs

pid	Process
376	1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ouspipeaf-exoas.exe	1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ouspipeaf-exoas.exe	1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:376
- C:\Windows\SysWOW64\ouspipeaf-exoas.exe
  "C:\Windows\SysWOW64\ouspipeaf-exoas.exe"
  2⤵
  - Executes dropped EXE
  PID:1548

\Windows\SysWOW64\ouspipeaf-exoas.exe

Filesize
70KB

MD5
5045750c841efc1770047aef1fdafa07

SHA1
6bb5f7ca3cafa923fe9ef3a4640a98f4dc4dc913

SHA256
0e53342f16972ac4a0cf2c77b7aff34e9d592a19a1200fd1f702341c3d33482b

SHA512
ec815c9c3f3054157a47c992dadcd6120e9d751c871f04c992cc249488d8716e7f1e9f04c1838dc2868530a47689f76f68ec050db6e580b5b5672a4daa23520c

Download Submit
memory/376-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download