7ef31f750545f0a5c29a2416e4543de22e01443849d9784be0c4e49b5a7d6292

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
10/05/2024, 06:22

Target
8e039e2093c37d02d4afaab54ccfd900_NeikiAnalytics.exe
Size 79KB
Sample240510-g42d7abb66
SHA256 7ef31f750545f0a5c29a2416e4543de22e01443849d9784be0c4e49b5a7d6292
MD5 8e039e2093c37d02d4afaab54ccfd900
SHA1 fb10ffc288a754510c6c57f3a0fea09aac611e74
SHA512 b0fd5198a0d44d7cb3a1fd3b781467069c5f5115fd4cb6eec186a5ec92cba88ab30fe02ec12e516823f8edeeacbe3e4548fa0f704603f8b8c8f4e90cfc19d16e
SSDEEP 1536:zv8W23+5FoeWJOQA8AkqUhMb2nuy5wgIP0CSJ+5yjB8GMGlZ5G:zvHM+voeWIGdqU7uy5w9WMyjN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
388	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1928 wrote to memory of 1712	1928	8e039e2093c37d02d4afaab54ccfd900_NeikiAnalytics.exe	83
PID 1928 wrote to memory of 1712	1928	8e039e2093c37d02d4afaab54ccfd900_NeikiAnalytics.exe	83
PID 1928 wrote to memory of 1712	1928	8e039e2093c37d02d4afaab54ccfd900_NeikiAnalytics.exe	83
PID 1712 wrote to memory of 388	1712	cmd.exe	84
PID 1712 wrote to memory of 388	1712	cmd.exe	84
PID 1712 wrote to memory of 388	1712	cmd.exe	84

C:\Users\Admin\AppData\Local\Temp\8e039e2093c37d02d4afaab54ccfd900_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\8e039e2093c37d02d4afaab54ccfd900_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1928
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1712
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:388

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 8b229a372476deeaf7eba46328e98579c1b2d9d3e956d287b2edfc03d2af8b88
MD5 52b655f9092d8d3c243ab9b2af70ef6c
SHA1 a5985ece8d605990e2b394e1cac3d67616af2422
SHA512 55b0155c816760471afad2b3eb6e64e97b32e7fb491a41dc8c62b9fc5513061e0b07c388d375c6e8b47268835cafc4a96fd78d333e4e1730324d71700932b103
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5ydB8GMGlZ5G:zv+vTpGdqU7uy5w9WMydN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/388-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/1928-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download