250977e6928296dbb28fedc6f8fcecac7b8802c3dd4ac3d41c214d96b8f454b8

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
30/06/2024, 23:58

Target

250977e6928296dbb28fedc6f8fcecac7b8802c3dd4ac3d41c214d96b8f454b8_NeikiAnalytics.exe
Size

74KB
MD5

2cda3b765b3953ae2fb0e5dccf4755c0
SHA1

c5d1586ba414f283ccceed25eb0602295c346785
SHA256

250977e6928296dbb28fedc6f8fcecac7b8802c3dd4ac3d41c214d96b8f454b8
SHA512

6a777cb4df07bbb7495b023b953d5bd9c159af0552c21903e1033d710436f97fc23b83329d7084c54d8fd4662bfd212f967ea39eca281b273f6452bc61da0bb3
SSDEEP

1536:1qhWNc6tJBsHnsim25qCp7nwHyxTQrQRLI93:cKR4sf25qCp7wHyxEcq

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2740	ouffoamoat-agoot.exe

Loads dropped DLL 1 IoCs

pid	Process
2552	250977e6928296dbb28fedc6f8fcecac7b8802c3dd4ac3d41c214d96b8f454b8_NeikiAnalytics.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ouffoamoat-agoot.exe	250977e6928296dbb28fedc6f8fcecac7b8802c3dd4ac3d41c214d96b8f454b8_NeikiAnalytics.exe
File created	C:\Windows\SysWOW64\ouffoamoat-agoot.exe	250977e6928296dbb28fedc6f8fcecac7b8802c3dd4ac3d41c214d96b8f454b8_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\250977e6928296dbb28fedc6f8fcecac7b8802c3dd4ac3d41c214d96b8f454b8_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\250977e6928296dbb28fedc6f8fcecac7b8802c3dd4ac3d41c214d96b8f454b8_NeikiAnalytics.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:2552
- C:\Windows\SysWOW64\ouffoamoat-agoot.exe
  "C:\Windows\system32\ouffoamoat-agoot.exe"
  2⤵
  - Executes dropped EXE
  PID:2740

\Windows\SysWOW64\ouffoamoat-agoot.exe

Filesize
71KB

MD5
01d3ebe56c32f449adcfccbc9b86da3e

SHA1
4ab936882d414620deef32cfb6ae5e86d7fc6154

SHA256
198a1ee587abfb8d8076f9c5a57630c048cf71e910063cd43e86a8d5b9d1672b

SHA512
210f70120469a5fbb0704eec78f37ab8e55588f76b1a4030c831dbd318de30816903ec2a09821f88b2f6de7291511637e0a5674de1872a6bb85b4709fbd1aeeb

Download Submit
memory/2552-5-0x0000000000400000-0x0000000000403000-memory.dmp

Filesize
12KB

Download