9ac86e9e5904882b04cb7228f3640b92a5861604d6c796135be9e3faec3d0e5f

Analysis

max time kernel
135s
max time network
111s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 02:33

Target
93f2520580dd7b72e93ae9a1abbbf710_NeikiAnalytics.exe
Size 79KB
Sample240525-c195psbe5x
SHA256 9ac86e9e5904882b04cb7228f3640b92a5861604d6c796135be9e3faec3d0e5f
MD5 93f2520580dd7b72e93ae9a1abbbf710
SHA1 1ff106ebddf54e4587a84e3af910138be82105c6
SHA512 2d403fa5cdf2db7b6c8f849bdf8d1e2bd669e9a3a1704396133f87e99fc0a89bd848b6823539d15225054bd26b220dd7f211290212c084c2ab823dfd1c78c026
SSDEEP 1536:zv+omxaSOQA8AkqUhMb2nuy5wgIP0CSJ+5ypB8GMGlZ5G:zvrCaXGdqU7uy5w9WMypN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4460	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4180 wrote to memory of 1404	4180	93f2520580dd7b72e93ae9a1abbbf710_NeikiAnalytics.exe	83
PID 4180 wrote to memory of 1404	4180	93f2520580dd7b72e93ae9a1abbbf710_NeikiAnalytics.exe	83
PID 4180 wrote to memory of 1404	4180	93f2520580dd7b72e93ae9a1abbbf710_NeikiAnalytics.exe	83
PID 1404 wrote to memory of 4460	1404	cmd.exe	84
PID 1404 wrote to memory of 4460	1404	cmd.exe	84
PID 1404 wrote to memory of 4460	1404	cmd.exe	84

C:\Users\Admin\AppData\Local\Temp\93f2520580dd7b72e93ae9a1abbbf710_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\93f2520580dd7b72e93ae9a1abbbf710_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4180
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1404
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:4460

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 c526cced817433391d004f032826982ead79bab73f20c050f11087a51dda45f1
MD5 c02abd9b0e4fed416472ba6c36f973af
SHA1 1a4b8de7d1d4989fe0c18570bbf75510b985b41d
SHA512 9f600c28e3cdf69668930b1a63fafe630e59688a54ddce1a17fcb6cccf22e5401cf0b343eb9c8f333eb8bc8cb09fb9364fe0e085ff11efec3b59431071fc6595
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5yzB8GMGlZ5G:zv+vTpGdqU7uy5w9WMyzN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/4180-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/4460-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download