74162801cba2db2b8f19d1413f8ad2a8baa2e607cc0bdf2a42758bc0a589f859

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
16/05/2024, 21:15

Target

378888dbffd428a9cf2673cd6624df10_NeikiAnalytics.exe
Size

472KB
MD5

378888dbffd428a9cf2673cd6624df10
SHA1

44a5603eec581d43d6ddb338302e3f9a69d4c61d
SHA256

74162801cba2db2b8f19d1413f8ad2a8baa2e607cc0bdf2a42758bc0a589f859
SHA512

bc18c6ada671163b1bca884bbffe9732f37eea8c298333b625cb7723129624302f7b873fa349473def5289e0f7335a24f907f78bd5430271de7028ca93e33a51
SSDEEP

12288:ba3DHSbN9kCwLxFh3oOV0k9eP3d0BZD8Uw:bejSbN9ZwP3T0IPBr

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 2344	2128	378888dbffd428a9cf2673cd6624df10_NeikiAnalytics.exe	28
PID 2128 wrote to memory of 2344	2128	378888dbffd428a9cf2673cd6624df10_NeikiAnalytics.exe	28
PID 2128 wrote to memory of 2344	2128	378888dbffd428a9cf2673cd6624df10_NeikiAnalytics.exe	28
PID 2128 wrote to memory of 2344	2128	378888dbffd428a9cf2673cd6624df10_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\378888dbffd428a9cf2673cd6624df10_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\378888dbffd428a9cf2673cd6624df10_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
  dw20.exe -x -s 424
  2⤵
  PID:2344

memory/2128-0-0x0000000074EB1000-0x0000000074EB2000-memory.dmp

Filesize
4KB

Download
memory/2128-1-0x0000000074EB0000-0x000000007545B000-memory.dmp

Filesize
5.7MB

Download
memory/2128-2-0x0000000074EB0000-0x000000007545B000-memory.dmp

Filesize
5.7MB

Download
memory/2128-4-0x0000000074EB0000-0x000000007545B000-memory.dmp

Filesize
5.7MB

Download
memory/2344-3-0x0000000000470000-0x0000000000471000-memory.dmp

Filesize
4KB

Download
memory/2344-5-0x0000000000470000-0x0000000000471000-memory.dmp

Filesize
4KB

Download