0c541a694b20f7fe27ba74110634f01405b5f65b93b540f3340be69eb82c7f38

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10/05/2024, 03:39

Target
6044ec8c63fd437d4a423e5a13cbac50_NeikiAnalytics.exe
Size 79KB
Sample240510-d73jwaca48
SHA256 0c541a694b20f7fe27ba74110634f01405b5f65b93b540f3340be69eb82c7f38
MD5 6044ec8c63fd437d4a423e5a13cbac50
SHA1 410496e2fcb74be2c99f923ae5d5e5ff760ccc2d
SHA512 cb2a28878555c68f77f1bcaf3ad952770fc6cc36dcfe2b05b84ee264e5b72060f894e971ec7e4d04e421533ad24449da66b54fea6ff1adc581a36a272c910f60
SSDEEP 1536:zvI/UIvqd/7oYvzsYaKOQA8AkqUhMb2nuy5wgIP0CSJ+5yZKCB8GMGlZ5G:zvIZqdDNsYa/GdqU7uy5w9WMyZKCN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3544	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 380 wrote to memory of 2352	380	6044ec8c63fd437d4a423e5a13cbac50_NeikiAnalytics.exe	82
PID 380 wrote to memory of 2352	380	6044ec8c63fd437d4a423e5a13cbac50_NeikiAnalytics.exe	82
PID 380 wrote to memory of 2352	380	6044ec8c63fd437d4a423e5a13cbac50_NeikiAnalytics.exe	82
PID 2352 wrote to memory of 3544	2352	cmd.exe	83
PID 2352 wrote to memory of 3544	2352	cmd.exe	83
PID 2352 wrote to memory of 3544	2352	cmd.exe	83

C:\Users\Admin\AppData\Local\Temp\6044ec8c63fd437d4a423e5a13cbac50_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\6044ec8c63fd437d4a423e5a13cbac50_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:380
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2352
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:3544

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 5fa58f6a03799a775606ec292410fb4ad6bc3b5c5448c68f7ae1709b46d63896
MD5 5bc430f341578bcd1eb76ae55a1ee0f3
SHA1 420285a2b829085e14544b60e20fe0759f48b840
SHA512 3a892566e298c8b5b212b5a4d056c0e268bca2b33ec064a6d2084415ff59babc06e0272b48cbcf5827f37c50955e113d4e1d68e74280cab31db7a4980e147e94
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5yxKCB8GMGlZ5G:zv+vTpGdqU7uy5w9WMyxKCN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/380-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/3544-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download