87fa09f86ad43050c41d1eec6d87d1c1db73a3d8cae6afa1259ac090c7d8e173

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10/05/2024, 01:37

Target

3e6f26d2c489dfd1e9efbb86450dd370_NeikiAnalytics.dll
Size

19KB
MD5

3e6f26d2c489dfd1e9efbb86450dd370
SHA1

a99d68c9e3e7e81672f9cb9b5cd86c4c1c0c6400
SHA256

87fa09f86ad43050c41d1eec6d87d1c1db73a3d8cae6afa1259ac090c7d8e173
SHA512

7ea76c3d8873b54496f452c53d237591d530183b45e8288cec0c355e49fb52e9510fe529ae942fb58a933ffdcd6a9ebc77d4e115c8fbb76256450967306a14fd
SSDEEP

384:qHLuxOi/osbDrlrL2fwAHnP6P1DVzcBH4z:2LeOigsbdrWHSPZVIBH4z

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 864 wrote to memory of 3624	864	rundll32.exe	83
PID 864 wrote to memory of 3624	864	rundll32.exe	83
PID 864 wrote to memory of 3624	864	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3e6f26d2c489dfd1e9efbb86450dd370_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:864
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\3e6f26d2c489dfd1e9efbb86450dd370_NeikiAnalytics.dll,#1
  2⤵
  PID:3624