Analysis
-
max time kernel
129s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 02:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
74510398374de8bde402df91bcabf180_NeikiAnalytics.dll
Resource
win7-20240419-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
74510398374de8bde402df91bcabf180_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
74510398374de8bde402df91bcabf180_NeikiAnalytics.dll
-
Size
3KB
-
MD5
74510398374de8bde402df91bcabf180
-
SHA1
b02a1f03df8a256234b29d0473001da836c32f9f
-
SHA256
48d831a21570a97db6bdc56d0044c44252f99a37bf13d557199f154aa82d982c
-
SHA512
f94c6bd59410dfa9c83b60a2bce7f6dc5583433f674c3dd6c37e7085cf8b01555fa34f0cb4fb44e09559e0dbdda2334d780cec60ad162c98aff2749efb5c94c3
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 4484 wrote to memory of 1852 4484 rundll32.exe rundll32.exe PID 4484 wrote to memory of 1852 4484 rundll32.exe rundll32.exe PID 4484 wrote to memory of 1852 4484 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\74510398374de8bde402df91bcabf180_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\74510398374de8bde402df91bcabf180_NeikiAnalytics.dll,#12⤵