1aca5509c5a36234101589251801dca913ffa950376a3a329ca0c44bdfe1fd19

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
10/05/2024, 02:17

Target

4a0fe417db5497818f7ad35badf095b0_NeikiAnalytics.exe
Size

24KB
MD5

4a0fe417db5497818f7ad35badf095b0
SHA1

53804c4276682dd1058a5e7870e616ea7d32570a
SHA256

1aca5509c5a36234101589251801dca913ffa950376a3a329ca0c44bdfe1fd19
SHA512

902e22de364855eb613be46112a93964e009c16fb63fa630a4060c3b6a3be57db4805f22ea7bf7507194ca9c87fe1a6531b445758eb6c2dfa81cc291232670cb
SSDEEP

384:Cuvs6sh2B1ZZvI1ugOgzQEgs5G8y8WyjI7xrZI5vFkM5G8y8WjjIaZW6hWR:vsh0QL5P9jIMvl5PUjIWS

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2368	2932	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2932 wrote to memory of 2368	2932	4a0fe417db5497818f7ad35badf095b0_NeikiAnalytics.exe	28
PID 2932 wrote to memory of 2368	2932	4a0fe417db5497818f7ad35badf095b0_NeikiAnalytics.exe	28
PID 2932 wrote to memory of 2368	2932	4a0fe417db5497818f7ad35badf095b0_NeikiAnalytics.exe	28
PID 2932 wrote to memory of 2368	2932	4a0fe417db5497818f7ad35badf095b0_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\4a0fe417db5497818f7ad35badf095b0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\4a0fe417db5497818f7ad35badf095b0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2932
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2932 -s 656
  2⤵
  - Program crash
  PID:2368

memory/2932-0-0x0000000074AAE000-0x0000000074AAF000-memory.dmp

Filesize
4KB

Download
memory/2932-1-0x0000000000DC0000-0x0000000000DCA000-memory.dmp

Filesize
40KB

Download
memory/2932-2-0x0000000074AA0000-0x000000007518E000-memory.dmp

Filesize
6.9MB

Download
memory/2932-3-0x0000000074AA0000-0x000000007518E000-memory.dmp

Filesize
6.9MB

Download