Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 00:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5ed279f50bece65fa769ab752febbee0_NeikiAnalytics.dll
Resource
win7-20240220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5ed279f50bece65fa769ab752febbee0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
5ed279f50bece65fa769ab752febbee0_NeikiAnalytics.dll
-
Size
81KB
-
MD5
5ed279f50bece65fa769ab752febbee0
-
SHA1
259a6b060dff3bc58b677e803b9f5ae62a395ab9
-
SHA256
00c3c6cf04b274aee94e363ed2aea7d42c960d1e18b8348be5bc848c29eac8e0
-
SHA512
72fab4eb14bea9a11faba0287dce23b66aaada02dafb1a0c893b051d16cc730ee27ea2d91290ba09cc9ac41a4585d88f783c975df6ca01cf28b5e8d19fb5091a
-
SSDEEP
1536:+tByXv7uWGEqXZKXTadSp7Lxw9zzBPw+iASUSFOj8sWHcdF7zenq8Wi:+4v4JKXTx71w0ArSsXF3enq8Wi
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 112 wrote to memory of 4472 112 rundll32.exe rundll32.exe PID 112 wrote to memory of 4472 112 rundll32.exe rundll32.exe PID 112 wrote to memory of 4472 112 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5ed279f50bece65fa769ab752febbee0_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5ed279f50bece65fa769ab752febbee0_NeikiAnalytics.dll,#12⤵