c431fa1faf846bb86cc79a3dcd56a240c55fb50ca875423e655e366b59917c7e

Analysis

max time kernel
147s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 18:12

Target
0211583838bef965f06ddaae7ca133a0_NeikiAnalytics.exe
Size 184KB
Sample240603-ws68maff55
SHA256 c431fa1faf846bb86cc79a3dcd56a240c55fb50ca875423e655e366b59917c7e
MD5 0211583838bef965f06ddaae7ca133a0
SHA1 4d4698ed6e7e4c51f3780127faa78e8d6127fbaa
SHA512 fbb804febc54a8feb1d4eff30b452bf4dc134c9889d1c3d6aff0c67c2c78ad96b22abaf93f68ba9af902ec9142c31349876321ec17d949b82070aeece05ff0c9
SSDEEP 3072:6nJkmDoR2WHUdj0NXdchpdf+LvMq1viurnH:6nvo5Qj0khjf+LEq1viur
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2148	0211583838bef965f06ddaae7ca133a0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\0211583838bef965f06ddaae7ca133a0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\0211583838bef965f06ddaae7ca133a0_NeikiAnalytics.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2148

Unicorn-54653.exe

Path C:\Users\Admin\AppData\Local\Temp\Unicorn-54653.exe
Size 184KB
SHA256 85a01fe5447d2ba24920a33864c7bc0bb069c614993b645f9fe35f357aa66aec
MD5 59fc1915ca7d3a2b758eb22ea7693c34
SHA1 3022ea70e3a5c13c840e39bf95e4ad6801adcd1c
SHA512 803c4e681a26043373a849a1ce49c68a0c3ccb03c9741003a202a2ea2c31df41cb8025b3bfea378d489ac96de47a4346d78d78262ff8649d2da08ed7f854d8f0
SSDEEP 3072:6nJkmDoR2WHUdj0NXdchpdfvLvMq1viurnH:6nvo5Qj0khjfvLEq1viur
MD5 SHA1 SHA512 SSDEEP

Submit Download