Analysis
- max time kernel
116s - max time network
93s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
11/05/2024, 09:15
General
- Target aa1fe536cb98200daeeddff76e956e50_NeikiAnalytics.dll
- Size 2.3MB
- Sample240511-k8cheadd84
- SHA256 ca0558ea1219f2278af0eb483f6d3159d356f1c08dcaf8bd68eb8360ab2217b6
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\aa1fe536cb98200daeeddff76e956e50_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\aa1fe536cb98200daeeddff76e956e50_NeikiAnalytics.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2328-1-0x0000000010000000-0x0000000010253000-memory.dmp
memory/2328-0-0x0000000000AF0000-0x0000000000AF6000-memory.dmp
memory/2328-3-0x00000000029C0000-0x0000000002AD2000-memory.dmp
memory/2328-7-0x0000000002AE0000-0x0000000002BD7000-memory.dmp
memory/2328-4-0x0000000002AE0000-0x0000000002BD7000-memory.dmp
memory/2328-8-0x0000000010000000-0x0000000010253000-memory.dmp
memory/2328-10-0x0000000002AE0000-0x0000000002BD7000-memory.dmp
memory/2328-11-0x0000000002BE0000-0x0000000003E90000-memory.dmp
memory/2328-12-0x0000000003E90000-0x0000000003F7A000-memory.dmp
memory/2328-13-0x0000000003F80000-0x000000000406C000-memory.dmp
memory/2328-16-0x0000000003F80000-0x000000000406C000-memory.dmp
memory/2328-17-0x0000000000790000-0x0000000000792000-memory.dmp
memory/2328-18-0x0000000044A50000-0x0000000044A54000-memory.dmp