e707370b84bbef8f98a7e261ffe0bffcbbc01ba914c41e49ffe4b8bc9e86ca8b

Analysis

max time kernel
134s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 10:32

Target
6373b23a2ef5b9810d13cafdc433b9e0_NeikiAnalytics.exe
Size 79KB
Sample240526-mk2thafb6t
SHA256 e707370b84bbef8f98a7e261ffe0bffcbbc01ba914c41e49ffe4b8bc9e86ca8b
MD5 6373b23a2ef5b9810d13cafdc433b9e0
SHA1 b59a45259f129d21b6488f5917f8865806facc70
SHA512 33976d4763b895c0dba88f3411b0714af55ac723fb21262c5083ae24db259ed3a35e67aaf6c0289dbd94fe2884e66eed66c35a92b9e319f8c901d3e7022f8dec
SSDEEP 1536:zvcPzidMkP7yMnsnOQA8AkqUhMb2nuy5wgIP0CSJ+5yEl/B8GMGlZ5G:zvizidMkP7fsOGdqU7uy5w9WMyo/N5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3132	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4496 wrote to memory of 3528	4496	6373b23a2ef5b9810d13cafdc433b9e0_NeikiAnalytics.exe	85
PID 4496 wrote to memory of 3528	4496	6373b23a2ef5b9810d13cafdc433b9e0_NeikiAnalytics.exe	85
PID 4496 wrote to memory of 3528	4496	6373b23a2ef5b9810d13cafdc433b9e0_NeikiAnalytics.exe	85
PID 3528 wrote to memory of 3132	3528	cmd.exe	86
PID 3528 wrote to memory of 3132	3528	cmd.exe	86
PID 3528 wrote to memory of 3132	3528	cmd.exe	86

C:\Users\Admin\AppData\Local\Temp\6373b23a2ef5b9810d13cafdc433b9e0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\6373b23a2ef5b9810d13cafdc433b9e0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4496
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3528
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:3132

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 5ac0b4d08813ca5d55c0b0d523c617386f61838af58b7528f647dae3a4d1bbd0
MD5 406c82875620b1f138c8c2c6778fd32f
SHA1 5c5a6b7a3115807402fd9179b3ec0d24ce471636
SHA512 38fefb24006ac88c08c606ee292980137f30ca4c9fe97d9a5d1eae14cd66b213df7ea5ed3145df59313dbdd83da1c24d10e3ba4cdaad3ecab6cd770272d120e6
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5y4l/B8GMGlZ5G:zv+vTpGdqU7uy5w9WMys/N5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/3132-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/4496-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download