5146192225e17e4cd507ad33d96561344c1c05f5675ff5d0decd1aa12a992eff

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28/05/2024, 09:47

Target

3df71ac87df4dae162d1284faef5dff0_NeikiAnalytics.exe
Size

867KB
MD5

3df71ac87df4dae162d1284faef5dff0
SHA1

ad0f76cd622e6bfbc7d3410b43c99481dc192a93
SHA256

5146192225e17e4cd507ad33d96561344c1c05f5675ff5d0decd1aa12a992eff
SHA512

d205dec21b36ccb10a4976789f9469997a9abb8730b8d512950ae8450d6eb7919a322ed1325dcd501b6d66e6d84470b627a4d5cb349545b6dd1981034bc22383
SSDEEP

12288:iiXDd34f1JbDXU2uGNNgq3IaXwzTyUDqKk3Z+9aBsea9KOoSN:gf1ZXfZoq3nmDqKkZ/lLjSN

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1736	2108	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 1736	2108	3df71ac87df4dae162d1284faef5dff0_NeikiAnalytics.exe	28
PID 2108 wrote to memory of 1736	2108	3df71ac87df4dae162d1284faef5dff0_NeikiAnalytics.exe	28
PID 2108 wrote to memory of 1736	2108	3df71ac87df4dae162d1284faef5dff0_NeikiAnalytics.exe	28
PID 2108 wrote to memory of 1736	2108	3df71ac87df4dae162d1284faef5dff0_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\3df71ac87df4dae162d1284faef5dff0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3df71ac87df4dae162d1284faef5dff0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2108 -s 208
  2⤵
  - Program crash
  PID:1736