2de40d959cb1432c2eefac11f47d28c26c1f576551c73456ab6de0a96779bce1

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/05/2024, 23:04

Target

1475a4ba7fb83ef4d73b09e62707aff0_NeikiAnalytics.exe
Size

74KB
MD5

1475a4ba7fb83ef4d73b09e62707aff0
SHA1

fe5e57630d52cfd8e4ade54349d046fe15e75aed
SHA256

2de40d959cb1432c2eefac11f47d28c26c1f576551c73456ab6de0a96779bce1
SHA512

51c33364eed69db49e5629ba4f6c39d2425634a0e2a08ebc6a12ae1e87b82e00a4e2b4843c33183ce067c363b738df938cafe8e0598fa93774b10e19d171cb3f
SSDEEP

1536:1bPd6aXUhvYMwRHoly48kXA9pD9fWZ/bwPsaqPc1KqvV2M3:Ji2Mt8kQ9p9fSbwPEPQ1X

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2904	absootoam-eacom.exe

Loads dropped DLL 1 IoCs

pid	Process
2872	1475a4ba7fb83ef4d73b09e62707aff0_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\WINDOWS\SysWOW64\absootoam-eacom.exe	1475a4ba7fb83ef4d73b09e62707aff0_NeikiAnalytics.exe
File created	C:\WINDOWS\SysWOW64\absootoam-eacom.exe	1475a4ba7fb83ef4d73b09e62707aff0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\1475a4ba7fb83ef4d73b09e62707aff0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\1475a4ba7fb83ef4d73b09e62707aff0_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2872
- C:\WINDOWS\SysWOW64\absootoam-eacom.exe
  "C:\WINDOWS\SysWOW64\absootoam-eacom.exe"
  2⤵
  - Executes dropped EXE
  PID:2904

\Windows\SysWOW64\absootoam-eacom.exe

Filesize
70KB

MD5
cb8511cd288570b6afdc27d259c84907

SHA1
deaea5416c10ff245234426d839d8cfe6e7712b4

SHA256
7dfb363bcd03f4dea399fa20e5595882cb35fc0698010cee3679db384e3bac62

SHA512
970c0e3d83995ae43c0cb87e685e1db7d321516e0b781c3f4e972c3d3414b4d6337f437d790ad4ec47d1786bf57f30e8d1c2dba7535095dd3a1d8680b94ecd9f

Download Submit
memory/2872-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download