8bb1947a893779c754d059f77f329f7f7af7893c550da90023612ccd8756f839

Analysis

max time kernel
104s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/05/2024, 17:40

Target

37927db5a5d23d7bd70d097bcc4d6330_NeikiAnalytics.dll
Size

81KB
MD5

37927db5a5d23d7bd70d097bcc4d6330
SHA1

4ec1e0e05d5b2185e7b735253cc7444ba48dbf05
SHA256

8bb1947a893779c754d059f77f329f7f7af7893c550da90023612ccd8756f839
SHA512

d57b69d1d15bb466cfe7736f2ce4969870759799fc8b582bd2add743a7951884c81f49a05ef52cca8a407d19e5b45b3e5f844e4043d5aa3095bc84640907030e
SSDEEP

1536:4tByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8WX:44v4JKXTx71w0ArSsXF3enq8WX

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4476 wrote to memory of 1380	4476	rundll32.exe	82
PID 4476 wrote to memory of 1380	4476	rundll32.exe	82
PID 4476 wrote to memory of 1380	4476	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\37927db5a5d23d7bd70d097bcc4d6330_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4476
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\37927db5a5d23d7bd70d097bcc4d6330_NeikiAnalytics.dll,#1
  2⤵
  PID:1380