Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 23:06
Static task
static1
Behavioral task
behavioral1
Sample
53ba7132c744f7f6b079d629ddc8e660_NeikiAnalytics.dll
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
53ba7132c744f7f6b079d629ddc8e660_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
53ba7132c744f7f6b079d629ddc8e660_NeikiAnalytics.dll
-
Size
54KB
-
MD5
53ba7132c744f7f6b079d629ddc8e660
-
SHA1
05653936bddceb6ccb957e46e09c16716487e36d
-
SHA256
ee7a8dfc4d5a1c4ee05f7d18e4a9d52cdd2dddd33568ae3c58d13930706a7d29
-
SHA512
1f1b6d7a723e481117e8a3787474c12331aecc2265fd346903772236d9667507cd9ad116378cb968a2037cbec81006278d78f1bcaa2bb38a0b557a3d61e7d474
-
SSDEEP
1536:Z7g37hujj6+V1byTxTksEooN8b+YfzMQ7q:Z7g37hujm+V1buksEoliYfz0
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 2988 wrote to memory of 1660 2988 rundll32.exe rundll32.exe PID 2988 wrote to memory of 1660 2988 rundll32.exe rundll32.exe PID 2988 wrote to memory of 1660 2988 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\53ba7132c744f7f6b079d629ddc8e660_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\53ba7132c744f7f6b079d629ddc8e660_NeikiAnalytics.dll,#12⤵