Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
24-05-2024 20:57
Behavioral task
behavioral1
Sample
737ebd7e5d0558adbd5820182766ca10_NeikiAnalytics.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
737ebd7e5d0558adbd5820182766ca10_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
737ebd7e5d0558adbd5820182766ca10_NeikiAnalytics.exe
-
Size
731KB
-
MD5
737ebd7e5d0558adbd5820182766ca10
-
SHA1
09574f343b2498023502500728082c7ddf808d8c
-
SHA256
6824fdd6d4dcffaf84159f5974b2cfea2bc3cad294fa897e6042085d3eb8b4b5
-
SHA512
71ebedd787f94ffc922578df2bf29da64d001d9cad34d3badfa77ca4ceb399f8b67fc2a5abea70fcd2a3f31ba39aeece60e08098925c44c9f59112ff9a55f981
-
SSDEEP
6144:Fp19SmYRZbsuSBs3ojpe6aABlwZFsr5pOGJr3eRqk3tJc+xZRtiKzvzaOKIeM87z:Fp1EPZbsu2s3ojpe6aeSg3DeRqkUW8
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
737ebd7e5d0558adbd5820182766ca10_NeikiAnalytics.exedescription pid process target process PID 2240 wrote to memory of 2288 2240 737ebd7e5d0558adbd5820182766ca10_NeikiAnalytics.exe WerFault.exe PID 2240 wrote to memory of 2288 2240 737ebd7e5d0558adbd5820182766ca10_NeikiAnalytics.exe WerFault.exe PID 2240 wrote to memory of 2288 2240 737ebd7e5d0558adbd5820182766ca10_NeikiAnalytics.exe WerFault.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\737ebd7e5d0558adbd5820182766ca10_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\737ebd7e5d0558adbd5820182766ca10_NeikiAnalytics.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2240 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2240 -s 762⤵PID:2288