d6798682f26aa2f0796ecb87b38f79fa6dc247738012b2ef84dd44a2323b011c

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 22:54

Target

517e38cc245c55c9d39ae62d17b366c0_NeikiAnalytics.exe
Size

1.6MB
MD5

517e38cc245c55c9d39ae62d17b366c0
SHA1

136966f3492184af52cd1aefb6c1ca4ed6eb6a10
SHA256

d6798682f26aa2f0796ecb87b38f79fa6dc247738012b2ef84dd44a2323b011c
SHA512

8b39ac4ff786712cae0edc48ad4a5a403dab46961cb89b203f3b0fc29df20fb7f7effb69f8bd14566bc0a9f92c9ee027d88ed21e131cafbe0027d148fa2fa379
SSDEEP

24576:E/4uEvpwVTTB4YwvEVbMki+OqeclL57vaSIPasclh16eM+hj7fATcSMD1:EKwVTTB4Yrv1ocEx+Fh

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

517e38cc245c55c9d39ae62d17b366c0_NeikiAnalytics.exe

description	pid	process	target process
PID 1936 wrote to memory of 2980	1936	517e38cc245c55c9d39ae62d17b366c0_NeikiAnalytics.exe	cmd.exe
PID 1936 wrote to memory of 2980	1936	517e38cc245c55c9d39ae62d17b366c0_NeikiAnalytics.exe	cmd.exe
PID 1936 wrote to memory of 2980	1936	517e38cc245c55c9d39ae62d17b366c0_NeikiAnalytics.exe	cmd.exe
PID 1936 wrote to memory of 2980	1936	517e38cc245c55c9d39ae62d17b366c0_NeikiAnalytics.exe	cmd.exe

C:\Users\Admin\AppData\Local\Temp\517e38cc245c55c9d39ae62d17b366c0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\517e38cc245c55c9d39ae62d17b366c0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1936