d5b2db3fd533c95cd5b1ee20dc048033c33533276f52f32db77b8319f169f3b1

Analysis

max time kernel
117s
max time network
124s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
30/05/2024, 00:28

Target

5c69056f74460c31e3fde2cd64744a10_NeikiAnalytics.exe
Size

74KB
MD5

5c69056f74460c31e3fde2cd64744a10
SHA1

e976e2447f069465b5123f5de00c4047794524a9
SHA256

d5b2db3fd533c95cd5b1ee20dc048033c33533276f52f32db77b8319f169f3b1
SHA512

df080cec1096ec3bcd7a1cb882921a2e92cd231a4321c053ebb61231608b028674216e156ed6290ff09d81b90171c50fbdd41f55a48ec87a67d3acc208c95f39
SSDEEP

1536:1v1Po/bQ+2Ovwd7o7mUj2JB1I32MZ1Rb/NW/Cxjtme1Metnsq:t1PoTQ+2Ovwd7o7m02z1I32MnRzqIf19

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2256	obditoaf-com.exe

Loads dropped DLL 1 IoCs

pid	Process
1468	5c69056f74460c31e3fde2cd64744a10_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\obditoaf-com.exe	5c69056f74460c31e3fde2cd64744a10_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\obditoaf-com.exe	5c69056f74460c31e3fde2cd64744a10_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\5c69056f74460c31e3fde2cd64744a10_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\5c69056f74460c31e3fde2cd64744a10_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1468
- C:\Windows\SysWOW64\obditoaf-com.exe
  "C:\Windows\SysWOW64\obditoaf-com.exe"
  2⤵
  - Executes dropped EXE
  PID:2256

\Windows\SysWOW64\obditoaf-com.exe

Filesize
70KB

MD5
b6017991a3b55748ea68d20701c99d91

SHA1
972a1ca636cfe1e810b2e998f738116c78798b7c

SHA256
5baf606010d0afd81401e9dd0ea1139aab9fadd91a431dc8d857403d0514d45a

SHA512
05212753766e58d7db733b51cdb6395bba6c575399b0b72023c064d49629a5f959362c83e6aa82277b45c43a6dbf87fd3704cd2051b1f5f5386c22430495d9d6

Download Submit
memory/1468-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download