33ac141fdba36ba566f13cf32efbb6c5d5b7e2d3fdfd985164e7ad6e47bb09c9

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
10-05-2024 08:59

Target

af8c216f7f8ce88578d1ba87da133e50_NeikiAnalytics.exe
Size

410KB
MD5

af8c216f7f8ce88578d1ba87da133e50
SHA1

6713742a59f0d8176f3be81367005b32209a8e78
SHA256

33ac141fdba36ba566f13cf32efbb6c5d5b7e2d3fdfd985164e7ad6e47bb09c9
SHA512

7bf7ed5950a9b81d79ef8cfe640ccacdfbe662f8c0c4f506e50eb5554107702ec4f04f8b82beeeaaae1a0955f6b756a3aba01299812ef78d9f96dce2f83bd9f3
SSDEEP

384:XJ6wayA+1mwnA353BXR+oGfPmfm4MlcTGXdhjwroyY2rebV5O6KhdWb/83BXR+or:ZpQNwC3BESe4Vqth+0V5vKUE3BEJwRrb

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1900	2232	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 1900	2232	af8c216f7f8ce88578d1ba87da133e50_NeikiAnalytics.exe	28
PID 2232 wrote to memory of 1900	2232	af8c216f7f8ce88578d1ba87da133e50_NeikiAnalytics.exe	28
PID 2232 wrote to memory of 1900	2232	af8c216f7f8ce88578d1ba87da133e50_NeikiAnalytics.exe	28
PID 2232 wrote to memory of 1900	2232	af8c216f7f8ce88578d1ba87da133e50_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\af8c216f7f8ce88578d1ba87da133e50_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\af8c216f7f8ce88578d1ba87da133e50_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2232 -s 36
  2⤵
  - Program crash
  PID:1900