11ec5d0f2bd67d8f63c1e7bbaeb8f8c513427119010e5862c2416d42376dedd6

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 21:17

Target

039acb9c3c1051fcffd1debf81b95760_NeikiAnalytics.exe
Size

73KB
MD5

039acb9c3c1051fcffd1debf81b95760
SHA1

f79dd25024b54f8b786fb06018c59d83ba910ac5
SHA256

11ec5d0f2bd67d8f63c1e7bbaeb8f8c513427119010e5862c2416d42376dedd6
SHA512

eeaa9559b88f1d3b3a5721da32605e282c57c06ab95ca4bdf0b95d57b47eb9b73bf0d4d87e822818fb70b9ba40f1f5ef15002650bc5612e5a90ce73ed3a82927
SSDEEP

1536:1K7ylw2jlA6WBRCJKObnTNBbJ6I4WMJvdDlQDhI5erKT3FK:c7H6rbTNSImvplQVIQ0K

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2992	ouxvoaroof.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ouxvoaroof.exe	039acb9c3c1051fcffd1debf81b95760_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ouxvoaroof.exe	039acb9c3c1051fcffd1debf81b95760_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\039acb9c3c1051fcffd1debf81b95760_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\039acb9c3c1051fcffd1debf81b95760_NeikiAnalytics.exe"
1⤵
- Drops file in System32 directory
PID:3228
- C:\Windows\SysWOW64\ouxvoaroof.exe
  "C:\Windows\SysWOW64\ouxvoaroof.exe"
  2⤵
  - Executes dropped EXE
  PID:2992

C:\Windows\SysWOW64\ouxvoaroof.exe

Filesize
70KB

MD5
83a55cdf3abc968c883079cb8872152b

SHA1
fb6b388734833e93357eec172e4054b1db24482a

SHA256
072132b0b767411d937be6d32838d4bfb431c51fdfe5c02053d4ad5f2ed5c7d7

SHA512
ab5744b64e6b861949f2ceb1d4cbd3663e1467b23735f02c4b862704960d2f38735eaf6a73c83985621128741498d0ffc7ed0d48bb0d4cb1b47b1699335be650

Download Submit
memory/3228-1-0x00000000776B2000-0x00000000776B3000-memory.dmp

Filesize
4KB

Download
memory/3228-4-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download