22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21/05/2024, 08:30

Target

22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe
Size

174KB
MD5

61461190b41be75243e4fd1286eb37c0
SHA1

be3000985977759bb13b1b986e4e92892fb876fe
SHA256

22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578
SHA512

35c5352804209f062b0b09a9f499f3e47ca90d0be6ad59cbf44a72ae6b4e5379eec6f26eb6da9d0fc1a6431129af29cbad9a8b799bb6b302e882759945f3645e
SSDEEP

3072:K5lLh9N9tQZ6evvk7LZpEf67qAmsmRAdW:KN9rCr8xuAmsT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2344	2940	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2940 wrote to memory of 2344	2940	22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe	28
PID 2940 wrote to memory of 2344	2940	22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe	28
PID 2940 wrote to memory of 2344	2940	22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe	28
PID 2940 wrote to memory of 2344	2940	22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2940
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2940 -s 552
  2⤵
  - Program crash
  PID:2344

memory/2940-0-0x0000000074BDE000-0x0000000074BDF000-memory.dmp

Filesize
4KB

Download
memory/2940-1-0x0000000000280000-0x00000000002B0000-memory.dmp

Filesize
192KB

Download
memory/2940-2-0x0000000074BDE000-0x0000000074BDF000-memory.dmp

Filesize
4KB

Download