dd8c94906371da819861bff9c530e7e9a48ca86030501864f6ee7d61c3daee0a

Analysis

max time kernel
133s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 09:46

Target
2f7a5dbab8e9b151ed9746a84e0d3260_NeikiAnalytics.exe
Size 79KB
Sample240526-lrpbbaeg78
SHA256 dd8c94906371da819861bff9c530e7e9a48ca86030501864f6ee7d61c3daee0a
MD5 2f7a5dbab8e9b151ed9746a84e0d3260
SHA1 db486ca145e196617eff4d9b8c4e982534a11b71
SHA512 3e15f94607bef8df2507a107572d74d817d73b1ba05c442df9b7bb6abb8180a66713715fd853341cb5b0d8e893050119518789da833debfec7dcf9f1950900b6
SSDEEP 1536:zvWo8mdRDk19OQA8AkqUhMb2nuy5wgIP0CSJ+5yiBB8GMGlZ5G:zvWo8AfGdqU7uy5w9WMyiBN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1068	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2600 wrote to memory of 4496	2600	2f7a5dbab8e9b151ed9746a84e0d3260_NeikiAnalytics.exe	84
PID 2600 wrote to memory of 4496	2600	2f7a5dbab8e9b151ed9746a84e0d3260_NeikiAnalytics.exe	84
PID 2600 wrote to memory of 4496	2600	2f7a5dbab8e9b151ed9746a84e0d3260_NeikiAnalytics.exe	84
PID 4496 wrote to memory of 1068	4496	cmd.exe	85
PID 4496 wrote to memory of 1068	4496	cmd.exe	85
PID 4496 wrote to memory of 1068	4496	cmd.exe	85

C:\Users\Admin\AppData\Local\Temp\2f7a5dbab8e9b151ed9746a84e0d3260_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\2f7a5dbab8e9b151ed9746a84e0d3260_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2600
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4496
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:1068

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 f89a4e1206e36cd3a19b8efb596e928ecfc012af82b4f1a090080b582aebceb5
MD5 bb5d7a5796894b62e4ebc4e95f562758
SHA1 3b71c9bf7d6b2d64e3be48abf6745bd86de72c86
SHA512 dc9cddc46aeb9f6cc16d1826fdbac08fc499dabf2aa128c10d3a714626e760b5b7af1ea2c22a05b605f0041179ad63f0fdb82b898b1922179d2e66b03ca959f0
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5yeBB8GMGlZ5G:zv+vTpGdqU7uy5w9WMyeBN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1068-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/2600-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download