bf52318ca6c028328d2034ae26a44d2f4af201f26427b1cf2930c0cbf94fb8cd

Analysis

max time kernel
139s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2024 07:30

Target

bd34c252e03a326b07b8200a621b8510_NeikiAnalytics.dll
Size

65KB
MD5

bd34c252e03a326b07b8200a621b8510
SHA1

aa4b9f2496578b771a86e86193573d156cad5ee6
SHA256

bf52318ca6c028328d2034ae26a44d2f4af201f26427b1cf2930c0cbf94fb8cd
SHA512

40d8b7f774ecc11ac9a926ed052526da7a4d74c080e997065b01c8bccc0f1f873a11ddd240095fb3a8083189a964a8b78e40775e745a72ffede32d1480967ace
SSDEEP

1536:OpqcLXQNHGqQy3iVUi6lEpLaFS/N83VU0x:4jg7QjVUig98W60x

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1588 wrote to memory of 4564	1588	rundll32.exe	83
PID 1588 wrote to memory of 4564	1588	rundll32.exe	83
PID 1588 wrote to memory of 4564	1588	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bd34c252e03a326b07b8200a621b8510_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1588
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\bd34c252e03a326b07b8200a621b8510_NeikiAnalytics.dll,#1
  2⤵
  PID:4564