2f72d0e9b37cd35ac1a8e3f62c45b4017ee735aab879cde2b1ce780599ad5735

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
10/05/2024, 13:54

Target

ed0f5769603d6bbcec3f94059adfcb90_NeikiAnalytics.exe
Size

639KB
MD5

ed0f5769603d6bbcec3f94059adfcb90
SHA1

b136b39990147643d7cab31ab3d5b101df15b9b4
SHA256

2f72d0e9b37cd35ac1a8e3f62c45b4017ee735aab879cde2b1ce780599ad5735
SHA512

3cfce78364a6549735602a5001eeccf1da60773ab17f5ea32dcc1a6f61b636abd6611edead919ca1b3e0e5d2bf9d6d6ce53c08d6fdbfe60c1af70b93381ef883
SSDEEP

6144:wqDAwl0xPTMiR9JSSxPUKPdodHheV/Hwz4zmpPNipO:w+67XR9JSSxvPdodHhIHufPNd

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2376	1644	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1644 wrote to memory of 2376	1644	ed0f5769603d6bbcec3f94059adfcb90_NeikiAnalytics.exe	28
PID 1644 wrote to memory of 2376	1644	ed0f5769603d6bbcec3f94059adfcb90_NeikiAnalytics.exe	28
PID 1644 wrote to memory of 2376	1644	ed0f5769603d6bbcec3f94059adfcb90_NeikiAnalytics.exe	28
PID 1644 wrote to memory of 2376	1644	ed0f5769603d6bbcec3f94059adfcb90_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\ed0f5769603d6bbcec3f94059adfcb90_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\ed0f5769603d6bbcec3f94059adfcb90_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1644
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1644 -s 36
  2⤵
  - Program crash
  PID:2376