2e2bd861f0460323c07dd53a3f11f0d1f80a74beec087c81de0cacf362697336

Analysis

max time kernel
142s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/06/2024, 00:41

Target

7c62d79509e3939ef3cb5c4f2816db40_NeikiAnalytics.exe
Size

411KB
MD5

7c62d79509e3939ef3cb5c4f2816db40
SHA1

cb98d9187ff002068f13a3ad5a8d8630cbfdf531
SHA256

2e2bd861f0460323c07dd53a3f11f0d1f80a74beec087c81de0cacf362697336
SHA512

069dc9bff28016fa5a9463dfde1beb0fe60e56be6ed1b0404ee41848a9af36458467f5cb14091acc3eaa4ef6d6dd674eccc1ccd74ac73634223e714dfccdfafb
SSDEEP

6144:gVdvczEb7GUOpYWhNVynE/mFlppaiiYMa6wSVsNwBdt1eJg0xPjqHI:gZLolhNVyEg8iiWSVsNSdt1OvjqHI

Score

7^/10

Deletes itself 1 IoCs

pid	Process
4220	59.tmp

Executes dropped EXE 1 IoCs

pid	Process
4220	59.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2412 wrote to memory of 4220	2412	7c62d79509e3939ef3cb5c4f2816db40_NeikiAnalytics.exe	92
PID 2412 wrote to memory of 4220	2412	7c62d79509e3939ef3cb5c4f2816db40_NeikiAnalytics.exe	92
PID 2412 wrote to memory of 4220	2412	7c62d79509e3939ef3cb5c4f2816db40_NeikiAnalytics.exe	92

C:\Users\Admin\AppData\Local\Temp\7c62d79509e3939ef3cb5c4f2816db40_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\7c62d79509e3939ef3cb5c4f2816db40_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2412
- C:\Users\Admin\AppData\Local\Temp\59.tmp
  "C:\Users\Admin\AppData\Local\Temp\59.tmp" --pingC:\Users\Admin\AppData\Local\Temp\7c62d79509e3939ef3cb5c4f2816db40_NeikiAnalytics.exe D7089EB1D8989590FA0D5A699EC5ECC22D5B4B2421DD143E144CD5487F8312EAF0EFFC7A4DACF3DEF17E30426CED909EE6A453514D5924E1DB277B22C1726176
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:4220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3744 --field-trial-handle=3192,i,2785050981002401924,4037047756083432660,262144 --variations-seed-version /prefetch:8
1⤵
PID:4996

C:\Users\Admin\AppData\Local\Temp\59.tmp

Filesize
411KB

MD5
ca8b84cedbf9e49b63fc17bb73758627

SHA1
b22b7d8d2b18d01a24f247bf6b8715b81a905dd1

SHA256
33d18b5ca8baa777b299868fcc4030ac50da35a4a9d8167467311a23215bd270

SHA512
fb6a47ea7574a7dc8b0a065f960ebad18dde30584aafce74354eba936c0955906da4b93823f3774f6690cdeaa3d20ecb4e12226c73a2ccc6cba27b08420c0601

Download Submit