946026f92078e8a9cf706e6441de6ee03a82d6c9f3fa32fea325bae1a14884ef

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
03-06-2024 10:57

Target

a0f4adb443a301607613c38ab67487d0_NeikiAnalytics.exe
Size

70KB
MD5

a0f4adb443a301607613c38ab67487d0
SHA1

1d238c97976c473a5b62e447185c02163133794b
SHA256

946026f92078e8a9cf706e6441de6ee03a82d6c9f3fa32fea325bae1a14884ef
SHA512

22f6011fc3845b25a4b9edb49482d6f1cd919307f29c930513363ce0fbe2b0c1a33e68593045868555d8bf9d554af3e0e536746fd073d32e9bc5174a9e6e206f
SSDEEP

768:hZZ6Zyf9/8AFM3YO3mqZLB0eQ4Vb+O1q+AfQt295Pe0+03PHvioazoTGj:1V8acY5c0nqb+it2zeyPioagGj

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2144	etnoatuh.exe

Loads dropped DLL 1 IoCs

pid	Process
2976	a0f4adb443a301607613c38ab67487d0_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\etnoatuh.exe	a0f4adb443a301607613c38ab67487d0_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\etnoatuh.exe	a0f4adb443a301607613c38ab67487d0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\a0f4adb443a301607613c38ab67487d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\a0f4adb443a301607613c38ab67487d0_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2976
- C:\Windows\SysWOW64\etnoatuh.exe
  "C:\Windows\SysWOW64\etnoatuh.exe"
  2⤵
  - Executes dropped EXE
  PID:2144

C:\Windows\SysWOW64\etnoatuh.exe

Filesize
67KB

MD5
c943395417e525d9ffc7b7cbfc439097

SHA1
ebe91e9eaacd187b1801e76d701bc35c5b2f6ad0

SHA256
890aff612d84d843e779562a345e0159bf14effec98eb9964bdd27b35008b36c

SHA512
99d10d2258edc54f123aef190f72fb91ebff6c01011ab31bf17c7e05fb6f9c12621f9d22089b2feede9cdfc411fe7ac567dee099d3fd9ffbcd3b75764d613c08

Download Submit
memory/2976-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download