863d145abc27e7a006ba1358b68c87366c8b571bb7ad489446c050d6e93d3fef

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28-06-2024 04:51

Target

863d145abc27e7a006ba1358b68c87366c8b571bb7ad489446c050d6e93d3fef_NeikiAnalytics.exe
Size

68KB
MD5

0efef0d68bf54740873e19ac132e8300
SHA1

feeec8c53613c6ab52818a0d30cea4c3a0470dcc
SHA256

863d145abc27e7a006ba1358b68c87366c8b571bb7ad489446c050d6e93d3fef
SHA512

b891367f31996d2dc895e724a8ed21e877dda3e96024af9b209dd54fdbdefa012ea55b90467444e11e5b23fadb5f2131f345ca96ad505da86f63e42d3aafc026
SSDEEP

768:/7BlpQpARFbhIYJIJDYJIJPfFpsJcFfFpsJcmnGUNGU4EXBwzEXBwnR5hrxR5hrs:/7ZQpApze+eJfFpsJOfFpsJeFrxFrs

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1116	863d145abc27e7a006ba1358b68c87366c8b571bb7ad489446c050d6e93d3fef_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\Zombie.exe	863d145abc27e7a006ba1358b68c87366c8b571bb7ad489446c050d6e93d3fef_NeikiAnalytics.exe
File opened for modification	C:\Windows\SysWOW64\Zombie.exe	863d145abc27e7a006ba1358b68c87366c8b571bb7ad489446c050d6e93d3fef_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\863d145abc27e7a006ba1358b68c87366c8b571bb7ad489446c050d6e93d3fef_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\863d145abc27e7a006ba1358b68c87366c8b571bb7ad489446c050d6e93d3fef_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:1116
- C:\Windows\SysWOW64\Zombie.exe
  "C:\Windows\system32\Zombie.exe"
  2⤵
  PID:2216

\Windows\SysWOW64\Zombie.exe

Filesize
68KB

MD5
f9c9886e33fc26d661b3127d7697ae5e

SHA1
8b68fa227501fa70b9fac83d1bfe5805cebd764e

SHA256
dbd9af5d92412f9c1a1ade58a584e908dd4180ddaedb2e28a283219cf2b27274

SHA512
61b064190785354a4e8dea2706069020d986c782320f009ecb7d2ac3671354ac61e21d5e1e3bc831adf2a02db735a3cf23b6498eb9eb6478ad0942edb7f54228

Download Submit
memory/1116-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1116-7-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download