d3a9c163afc666f70a95c5dba7d3e34ab92d99c2d142ee2414a29d21348aacad

Analysis

max time kernel
122s
max time network
132s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/05/2024, 13:21

Target

43e867cc9e53fe53b58dad2eaf84e410_NeikiAnalytics.exe
Size

1.3MB
MD5

43e867cc9e53fe53b58dad2eaf84e410
SHA1

04c81aea17f5fa30fbec74d8973fe729203a99c5
SHA256

d3a9c163afc666f70a95c5dba7d3e34ab92d99c2d142ee2414a29d21348aacad
SHA512

475ce2112884c372f0f76ce9b44a3fd18a6e17099d77656edd2f2185e88811cc6de4914c04c1963a91b8cd4dc8e93b71b3cc3db11310542bd05ba5607b5ce44e
SSDEEP

24:eqGSQLHJGl8hBtbqCmXxoEp/KCDBVz+JuHGhnPvmlGy4utl8W6:bq+itKXCshB1+JuHGxAlRF

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process
2124	2216	WerFault.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 2124	2216	43e867cc9e53fe53b58dad2eaf84e410_NeikiAnalytics.exe	28
PID 2216 wrote to memory of 2124	2216	43e867cc9e53fe53b58dad2eaf84e410_NeikiAnalytics.exe	28
PID 2216 wrote to memory of 2124	2216	43e867cc9e53fe53b58dad2eaf84e410_NeikiAnalytics.exe	28
PID 2216 wrote to memory of 2124	2216	43e867cc9e53fe53b58dad2eaf84e410_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\43e867cc9e53fe53b58dad2eaf84e410_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\43e867cc9e53fe53b58dad2eaf84e410_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 36
  2⤵
  - Program crash
  PID:2124