fe0d44706e183a1307c68f1e685601300819d6ea54efcc3bb4170ea4b586fd57

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23/05/2024, 11:19

Target
37cc1228e49a5dfa0a8954b2a53c4080_NeikiAnalytics.dll
Size 6KB
Sample240523-ne6e6sec44
SHA256 fe0d44706e183a1307c68f1e685601300819d6ea54efcc3bb4170ea4b586fd57
MD5 37cc1228e49a5dfa0a8954b2a53c4080
SHA1 9fa5a4a670d647ded3d93d5aabbc1d1c059204a7
SHA512 ccbd954c02499b65373a218a91976241360d20a8daac6c668e6a361beaaa8ffbdcbdb595f1e22d7703a45ba67ac4745bcee117a977366fbc7f8f8996342d0b87
SSDEEP 96:DixZjmjtjd8jPjcZGR5TIFZoKlIQaCbQoDKWBMWz94rCDrVonrSunG:unSR6bgYKq0IQbbQoDKWaWp4mD2nvG
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 380 wrote to memory of 820	380	rundll32.exe	83
PID 380 wrote to memory of 820	380	rundll32.exe	83
PID 380 wrote to memory of 820	380	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\37cc1228e49a5dfa0a8954b2a53c4080_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:380
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\37cc1228e49a5dfa0a8954b2a53c4080_NeikiAnalytics.dll,#1
  2⤵
  PID:820