ed5e039a59c9a75666e812fae8bee6050f8e37f919d0c316cb29be2ca21e4727

Analysis

max time kernel
135s
max time network
105s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 19:29

Target

07d584f4dd30e8584fa678d5777de8d0_NeikiAnalytics.exe
Size

224KB
MD5

07d584f4dd30e8584fa678d5777de8d0
SHA1

064411924342e296279d801782ab54e65e96ae85
SHA256

ed5e039a59c9a75666e812fae8bee6050f8e37f919d0c316cb29be2ca21e4727
SHA512

59b63c5dbac50d551dc098dae1a753a72d023377ff8baf6fabe94dc818207fe1ad088c33976ebe814b5751f6dc70c1ec7f99fdfc9319af6ecb078fb11e38581b
SSDEEP

1536:AvSx83jUh+0R9i4W60dTKuJjvR2Ug8sn4+EBFrexIjiiFckfCP/CozO:h8TUJni4WpdTLJArU9exIjiiHC3CozO

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

07d584f4dd30e8584fa678d5777de8d0_NeikiAnalytics.exe

description	pid	process	target process
PID 3732 wrote to memory of 3848	3732	07d584f4dd30e8584fa678d5777de8d0_NeikiAnalytics.exe	cmd.exe
PID 3732 wrote to memory of 3848	3732	07d584f4dd30e8584fa678d5777de8d0_NeikiAnalytics.exe	cmd.exe
PID 3732 wrote to memory of 3848	3732	07d584f4dd30e8584fa678d5777de8d0_NeikiAnalytics.exe	cmd.exe

C:\Users\Admin\AppData\Local\Temp\07d584f4dd30e8584fa678d5777de8d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\07d584f4dd30e8584fa678d5777de8d0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3732