987b59c730bd5ee23afeb15c6ceeddb0fda44185ce4f4d81c78b6d67e4200520

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 23:26

Target

491360e5712dfc44e3b33afb1c477860_NeikiAnalytics.exe
Size

4.4MB
MD5

491360e5712dfc44e3b33afb1c477860
SHA1

ece96ab757fc73eb4d7555d82d4a833caf622e96
SHA256

987b59c730bd5ee23afeb15c6ceeddb0fda44185ce4f4d81c78b6d67e4200520
SHA512

496c908de6b64474f01a6963777cbbcfa7d401bcc15127535bc9c073f853f20336c43fd64e7d388b438074f8ddf3204dd8276a99aecffaa2b582349e1f7c79fb
SSDEEP

49152:dDYwjk9zmGkojIYK/j4qzoEzMjiF0reMH+qPWj:dDXjkkGkojwj4qzoEzMjiiCQyj

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3056 wrote to memory of 2088	3056	491360e5712dfc44e3b33afb1c477860_NeikiAnalytics.exe	28
PID 3056 wrote to memory of 2088	3056	491360e5712dfc44e3b33afb1c477860_NeikiAnalytics.exe	28
PID 3056 wrote to memory of 2088	3056	491360e5712dfc44e3b33afb1c477860_NeikiAnalytics.exe	28
PID 3056 wrote to memory of 2088	3056	491360e5712dfc44e3b33afb1c477860_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\491360e5712dfc44e3b33afb1c477860_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\491360e5712dfc44e3b33afb1c477860_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3056
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 420
  2⤵
  PID:2088

memory/2088-3-0x0000000001DF0000-0x0000000001DF1000-memory.dmp

Filesize
4KB

Download
memory/3056-0-0x0000000074CE1000-0x0000000074CE2000-memory.dmp

Filesize
4KB

Download
memory/3056-1-0x0000000074CE0000-0x000000007528B000-memory.dmp

Filesize
5.7MB

Download
memory/3056-2-0x0000000074CE0000-0x000000007528B000-memory.dmp

Filesize
5.7MB

Download
memory/3056-4-0x0000000074CE0000-0x000000007528B000-memory.dmp

Filesize
5.7MB

Download