6308e8a737a73fd86e24e0bb452096ed231ca68499759192952d056975b1782a

Analysis

max time kernel
141s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 18:03

Target

1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe
Size

74KB
MD5

1adc1aec97153f2c8512491d0aeddbe0
SHA1

f291faaab5051655b33dd7dcb2eed21f0a339e33
SHA256

6308e8a737a73fd86e24e0bb452096ed231ca68499759192952d056975b1782a
SHA512

12177391fee66c2ac13f8741e6e704886719a72e9b9aa376876cc5373801f49b39a6b1a453ebc6b3b099c552f7134a295657d090721a78f92d80d514844caed9
SSDEEP

1536:1PME0nJHEleopj5g2X+UuxCQT+fByvWmRjNvNHKIQwo+ggY:xeKn95d+RCQmByH9NJygY

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2416	ouspipeaf-exoas.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ouspipeaf-exoas.exe	1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ouspipeaf-exoas.exe	1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\1adc1aec97153f2c8512491d0aeddbe0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:4848
- C:\Windows\SysWOW64\ouspipeaf-exoas.exe
  "C:\Windows\SysWOW64\ouspipeaf-exoas.exe"
  2⤵
  - Executes dropped EXE
  PID:2416

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1316 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
1⤵
PID:1892

C:\Windows\SysWOW64\ouspipeaf-exoas.exe

Filesize
70KB

MD5
5045750c841efc1770047aef1fdafa07

SHA1
6bb5f7ca3cafa923fe9ef3a4640a98f4dc4dc913

SHA256
0e53342f16972ac4a0cf2c77b7aff34e9d592a19a1200fd1f702341c3d33482b

SHA512
ec815c9c3f3054157a47c992dadcd6120e9d751c871f04c992cc249488d8716e7f1e9f04c1838dc2868530a47689f76f68ec050db6e580b5b5672a4daa23520c

Download Submit
memory/4848-0-0x0000000077722000-0x0000000077723000-memory.dmp

Filesize
4KB

Download
memory/4848-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download