3e10032f01cc97be1524992ea4f6770b3465d37ab74316f5c654f2da01be9c54 | Triage

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13-05-2024 10:25

Sharing

Report Analysis Logs

General

Target

b272c43a7fb6afa5a729dbbd0355a8e0_NeikiAnalytics.dll
Size

3KB
MD5

b272c43a7fb6afa5a729dbbd0355a8e0
SHA1

f4e668f6377bd1228b1a48e0a6f6ca94e377f53c
SHA256

3e10032f01cc97be1524992ea4f6770b3465d37ab74316f5c654f2da01be9c54
SHA512

cbb9560df04fda89d9298259889e6c0059fd4c31a54ff7a9cf930b3a8cd90293062745642f66494eade6c2e92c5918d49cd5b45770ba46345b80b2248b6fedf6

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1384 wrote to memory of 1036	1384	rundll32.exe	81
PID 1384 wrote to memory of 1036	1384	rundll32.exe	81
PID 1384 wrote to memory of 1036	1384	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b272c43a7fb6afa5a729dbbd0355a8e0_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1384
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b272c43a7fb6afa5a729dbbd0355a8e0_NeikiAnalytics.dll,#1
  2⤵
  PID:1036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads