d2f7a0dd4935dc32ea7e6a03431b18ca3bc2fb0a9bf6a3e2c19136c32ec9e0f0

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
29/05/2024, 10:12

Target

509c720ee202ddfd6978e058345693e0_NeikiAnalytics.exe
Size

74KB
MD5

509c720ee202ddfd6978e058345693e0
SHA1

777ddc04562acce8eb9bd57994623ce8a9570114
SHA256

d2f7a0dd4935dc32ea7e6a03431b18ca3bc2fb0a9bf6a3e2c19136c32ec9e0f0
SHA512

e0621b0b163c7e2f497e7e6fe16a6917d20e19d3f79b58f638ed0516c6ff77d1e32ab1184300e8dc013894cd54a025b98e00a7f2fbdc587d6cf09ccc38b09974
SSDEEP

1536:1/5eSd2CGilFul/vKVjb/uNf5Nf8kuHPvIRgHqyu:LDavcbUZ8trE

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1468	eagkadem.exe

Loads dropped DLL 1 IoCs

pid	Process
2824	509c720ee202ddfd6978e058345693e0_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\eagkadem.exe	509c720ee202ddfd6978e058345693e0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\eagkadem.exe	509c720ee202ddfd6978e058345693e0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\509c720ee202ddfd6978e058345693e0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\509c720ee202ddfd6978e058345693e0_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2824
- C:\Windows\SysWOW64\eagkadem.exe
  "C:\Windows\SysWOW64\eagkadem.exe"
  2⤵
  - Executes dropped EXE
  PID:1468

\Windows\SysWOW64\eagkadem.exe

Filesize
71KB

MD5
18ab40ddc6e637e91ed7092a8b12a8d3

SHA1
ea552543cec048f7286baa4482ae312bb152fa32

SHA256
54ded7a21e9bb35027a19bdf0f4735940c78d0484889cab10b1face45ec77dcd

SHA512
50fdde98f0d24c6c1c9fd07a086174275aea497fa5423a18c052c8c0e84b5aaed005b7ecc74c368399eb929794824d17f9a3896e0bcaf20acdf9b6134d1be3ed

Download Submit
memory/2824-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download