44f5cd6047a9c72182b2382815264cf37a45c88d60df8ceda45b39035f82ffe6

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 19:03

Target

13d104f2d964c22b34355594d0045b60_NEIKI.exe
Size

212KB
MD5

13d104f2d964c22b34355594d0045b60
SHA1

c42080031d7040750a7cb7f89742a0a8acf4cbe0
SHA256

44f5cd6047a9c72182b2382815264cf37a45c88d60df8ceda45b39035f82ffe6
SHA512

75ee75f139f607ad64d4a6169774e18f30b694599e26aef2fcc4d1f6765fdf0111b6ff85f9890891b724e2feec917d1ad3fd8aeca8239616f93146b51cccf567
SSDEEP

1536:xUDRi9T5sJdi9bxHNr2pnx6KaUuP6iuwJRFqOWRDiH3c:x8RinudiP52xx67lLdhSiH3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2436	2212	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2436	2212	13d104f2d964c22b34355594d0045b60_NEIKI.exe	28
PID 2212 wrote to memory of 2436	2212	13d104f2d964c22b34355594d0045b60_NEIKI.exe	28
PID 2212 wrote to memory of 2436	2212	13d104f2d964c22b34355594d0045b60_NEIKI.exe	28
PID 2212 wrote to memory of 2436	2212	13d104f2d964c22b34355594d0045b60_NEIKI.exe	28

C:\Users\Admin\AppData\Local\Temp\13d104f2d964c22b34355594d0045b60_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\13d104f2d964c22b34355594d0045b60_NEIKI.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2212 -s 36
  2⤵
  - Program crash
  PID:2436

memory/2212-0-0x0000000000400000-0x0000000000435000-memory.dmp

Filesize
212KB

Download