664be582853c98c3a11bc5c06a7a5e93e2fdb45d60dddf0849f03395e114979f

Analysis

max time kernel
134s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 05:35

Target

7941c69e6b8f0ec754bceb228863d7d0_NeikiAnalytics.exe
Size

71KB
MD5

7941c69e6b8f0ec754bceb228863d7d0
SHA1

3251dbb6f4659347c663765385e3526623415196
SHA256

664be582853c98c3a11bc5c06a7a5e93e2fdb45d60dddf0849f03395e114979f
SHA512

f12013a4c533a4fb7884c3688dbcc6de0b54d555a25b7374dba69fb8232f54d969e04048fac16e77a01688d0860012f9bb5972afc02ca111b1c9e2fd446eae6e
SSDEEP

1536:1l52iwhqb1tqO7PvZkcUbSpx7/wteyNhf7:P0PhqZ/zvZtYSXceKJ7

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4988	elbatod-outid.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\WINDOWS\SysWOW64\elbatod-outid.exe	7941c69e6b8f0ec754bceb228863d7d0_NeikiAnalytics.exe
File opened for modification	C:\WINDOWS\SysWOW64\elbatod-outid.exe	7941c69e6b8f0ec754bceb228863d7d0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\7941c69e6b8f0ec754bceb228863d7d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\7941c69e6b8f0ec754bceb228863d7d0_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:3344
- C:\WINDOWS\SysWOW64\elbatod-outid.exe
  "C:\WINDOWS\SysWOW64\elbatod-outid.exe"
  2⤵
  - Executes dropped EXE
  PID:4988

C:\Windows\SysWOW64\elbatod-outid.exe

Filesize
68KB

MD5
87928afcf93e20c35f75247e0b251eea

SHA1
c712c22fb7d216295bf45e61fc5b575fa3c6e353

SHA256
e9034d624212a383b56523e735cb2247a7306c8cd13d12916424106b4bd7dbbf

SHA512
465c4f8651718d4b9d3e7d94dff125f5bfd082992f0c4ad71a5f98f4571020a9a1104fbc57d6220aaa37793b18bdebed163dea9fba85f447de9ae996ee902e82

Download Submit
memory/3344-3-0x0000000077CF2000-0x0000000077CF3000-memory.dmp

Filesize
4KB

Download
memory/3344-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download