fb49f5e707a19d167d810809b3d4f8c6dd934ba845e5a1245f5ee4593466842e

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
14-05-2024 07:57

Target

a7ebe3c9bce020c356edadb5a4ce13b0_NeikiAnalytics.exe
Size

1.2MB
MD5

a7ebe3c9bce020c356edadb5a4ce13b0
SHA1

4998b44245c1f924f2eb8a567e2a688178e077b6
SHA256

fb49f5e707a19d167d810809b3d4f8c6dd934ba845e5a1245f5ee4593466842e
SHA512

2794e75f84774950e2048fa53bf4f553b870e40c6954686e53e52504d46fa6f3a8252d387879e1c413aa52ce9edb85a6db6ce88ae2f51c30e3510e90674ca4b1
SSDEEP

12288:eX3w6UfexRxb4w7L6gE36N0cTUHiv6WbkBGG6NmScO49Vw+6Et0TVU2OpF9KWw1H:exUWxRxb4oL9E3ITTkBC3cOiU/Wc6NK

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2848	1268	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1268 wrote to memory of 2848	1268	a7ebe3c9bce020c356edadb5a4ce13b0_NeikiAnalytics.exe	28
PID 1268 wrote to memory of 2848	1268	a7ebe3c9bce020c356edadb5a4ce13b0_NeikiAnalytics.exe	28
PID 1268 wrote to memory of 2848	1268	a7ebe3c9bce020c356edadb5a4ce13b0_NeikiAnalytics.exe	28
PID 1268 wrote to memory of 2848	1268	a7ebe3c9bce020c356edadb5a4ce13b0_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\a7ebe3c9bce020c356edadb5a4ce13b0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\a7ebe3c9bce020c356edadb5a4ce13b0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1268
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1268 -s 308
  2⤵
  - Program crash
  PID:2848