4d19e4e21b87d5f05d0d2cfe403b0afc64b4b9be521a27287749af943d8ff048 | Triage

Analysis

max time kernel
120s
max time network
128s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
14-05-2024 03:06

Sharing

Report Analysis Logs

General

Target

632f2edd041c0b4435452dbe9eadd7c0_NeikiAnalytics.exe
Size

7KB
MD5

632f2edd041c0b4435452dbe9eadd7c0
SHA1

7f1910af77a89e4b2584c2431442723357a84dda
SHA256

4d19e4e21b87d5f05d0d2cfe403b0afc64b4b9be521a27287749af943d8ff048
SHA512

dd9764cbcdef3c6f989b4babb3b4ada8ac63f5efed0eebec283c88863673e77099a77d4430e300773e3aa93533884bc277ffef802753ef9fb0a18a2e1d51de5c
SSDEEP

96:Bjsv+WBoz1pOd3t7d7cAY3rtSQyLLzLjLn:BtOoA1cAY7tIP3jL

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 2376	3040	632f2edd041c0b4435452dbe9eadd7c0_NeikiAnalytics.exe	29
PID 3040 wrote to memory of 2376	3040	632f2edd041c0b4435452dbe9eadd7c0_NeikiAnalytics.exe	29
PID 3040 wrote to memory of 2376	3040	632f2edd041c0b4435452dbe9eadd7c0_NeikiAnalytics.exe	29

C:\Users\Admin\AppData\Local\Temp\632f2edd041c0b4435452dbe9eadd7c0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\632f2edd041c0b4435452dbe9eadd7c0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3040 -s 32
  2⤵
  PID:2376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads