df9600c706bb6c1eb058845abf0b350c6f9d595937b323321091ff7fe80d3232

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-05-2024 02:55

Target

5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe
Size

367KB
MD5

5717d0901810cb3be9c395d9a5db29d0
SHA1

819dfac31e3b7e77045e50b1053debcb610fb5f4
SHA256

df9600c706bb6c1eb058845abf0b350c6f9d595937b323321091ff7fe80d3232
SHA512

ca6a53969881dc34214e2eb62e439084b19893156ffa7861eeaa4b6ab809af8303b78736b854b6883fa354e3fcf6637009398124e00418809bf2e1c3b836133f
SSDEEP

6144:EbbD2RXh9KD7EvVkr0evEcZ7/CUqjfgQlVumrRVRXL0chXfoEcW:EbuRX6D7ENiKUqDgYumrnRXL0wN

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2200 2308 WerFault.exe 5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe

pid	pid_target	process	target process
2200	2308	WerFault.exe	5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe

description	pid	process	target process
PID 2308 wrote to memory of 2200	2308	5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe	WerFault.exe
PID 2308 wrote to memory of 2200	2308	5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe	WerFault.exe
PID 2308 wrote to memory of 2200	2308	5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe	WerFault.exe
PID 2308 wrote to memory of 2200	2308	5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\5717d0901810cb3be9c395d9a5db29d0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2308

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2308 -s 120
2⤵
- Program crash
PID:2200