Analysis
-
max time kernel
134s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 02:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
750b555b0b6c7ea412de1a7103503710_NeikiAnalytics.dll
Resource
win7-20231129-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
750b555b0b6c7ea412de1a7103503710_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
750b555b0b6c7ea412de1a7103503710_NeikiAnalytics.dll
-
Size
6KB
-
MD5
750b555b0b6c7ea412de1a7103503710
-
SHA1
44418d586e3f72e2492963e39e562b994f5cee5f
-
SHA256
39d2d3e7a06ef2930e505f86f3132a08cfb5f1564808d1ed9d034e7c7c8e2145
-
SHA512
6a5e8cefdeadc0fab8c20d80e6de46e0a194d110a1af916f2dc3bb6913a5aeef6739b4c368825dfc3767b46ff9bbb3e5b7c2c78062ca82263bc2afbab67f48fa
-
SSDEEP
96:hy859x0P8Ma6CBSvKlJwFRNoAi9TE8Uw:F5oLXC/OO
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 4936 wrote to memory of 5036 4936 rundll32.exe rundll32.exe PID 4936 wrote to memory of 5036 4936 rundll32.exe rundll32.exe PID 4936 wrote to memory of 5036 4936 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\750b555b0b6c7ea412de1a7103503710_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\750b555b0b6c7ea412de1a7103503710_NeikiAnalytics.dll,#12⤵