364019d5a602b4bb2beb4357401ebf56514495234f165c8a7c94bf718db0b984

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
13/05/2024, 11:55

Target

b64260be911b1640d47008f43753fe60_NeikiAnalytics.dll
Size

4KB
MD5

b64260be911b1640d47008f43753fe60
SHA1

9deff83cdc6c061d1b669e766e4a798c07bc886b
SHA256

364019d5a602b4bb2beb4357401ebf56514495234f165c8a7c94bf718db0b984
SHA512

d4a47f508f94dc7efda8048797d9e9826ec8c33bc76b59cca398c2ba6d00346c655427de04e1e348fdbc63cd6eb58229db156191d104300560bf8df194c565e5
SSDEEP

48:iMHGv8j2IcW89NYEArhWHR0MiiIsiI6lXVkqlcH2SuiS6o+mmHBR1XgX:PmkiIz8UZrQ0MhI/ITqlyhR1XgX

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2428 wrote to memory of 4504	2428	rundll32.exe	82
PID 2428 wrote to memory of 4504	2428	rundll32.exe	82
PID 2428 wrote to memory of 4504	2428	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b64260be911b1640d47008f43753fe60_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2428
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b64260be911b1640d47008f43753fe60_NeikiAnalytics.dll,#1
  2⤵
  PID:4504