45bf1371370642823c9c5bbbe2deb1e23a226017e34b9cd12dae5069797c62c9

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
21-05-2024 12:01

Target

45bf1371370642823c9c5bbbe2deb1e23a226017e34b9cd12dae5069797c62c9_NeikiAnalytics.exe
Size

731KB
MD5

babcfb400ec4fc8b09f6119a5a3e4240
SHA1

d7ac8c643fe0da622451f2d89c3358a8efdab3ab
SHA256

45bf1371370642823c9c5bbbe2deb1e23a226017e34b9cd12dae5069797c62c9
SHA512

bd8128ddf4975268c61b7f4d287965c621a022e9b9ce53f56ee346f89fa40b65634493cbc67f004c88b97779cb435431c5db1b8e898cb0c4c179ce93860d257e
SSDEEP

6144:Fp19SmYRZbsuSBs3ojpe6aABlwZFsr5pOGJr3eRqk3tJc+xZRtiKzvzaOKIeM87z:Fp1EPZbsu2s3ojpe6aeSg3DeRqkUWw

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

45bf1371370642823c9c5bbbe2deb1e23a226017e34b9cd12dae5069797c62c9_NeikiAnalytics.exe

description	pid	process	target process
PID 2424 wrote to memory of 2172	2424	45bf1371370642823c9c5bbbe2deb1e23a226017e34b9cd12dae5069797c62c9_NeikiAnalytics.exe	WerFault.exe
PID 2424 wrote to memory of 2172	2424	45bf1371370642823c9c5bbbe2deb1e23a226017e34b9cd12dae5069797c62c9_NeikiAnalytics.exe	WerFault.exe
PID 2424 wrote to memory of 2172	2424	45bf1371370642823c9c5bbbe2deb1e23a226017e34b9cd12dae5069797c62c9_NeikiAnalytics.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\45bf1371370642823c9c5bbbe2deb1e23a226017e34b9cd12dae5069797c62c9_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\45bf1371370642823c9c5bbbe2deb1e23a226017e34b9cd12dae5069797c62c9_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2424

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2424 -s 76
2⤵
PID:2172