4ce82ad890559cca1188a7133e6fa893ee7923f2260434c52cc71724e26296c6

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-05-2024 13:22

Target

45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe
Size

276KB
MD5

45bd17e57a8346385c4b87f51a178670
SHA1

64004a92b1694257f08aff48fccfcb3eff4ea9f9
SHA256

4ce82ad890559cca1188a7133e6fa893ee7923f2260434c52cc71724e26296c6
SHA512

168a5831168b1ac29bde37c1a8d20019ad436af791c51213aa59e187c2f36f853c3a3aab33d438509c9da29e7a10450652ccf99dcf2f5ecb0254124eb212042d
SSDEEP

3072:NxvTk17HnQxwksbBiIyUkX/0nNT+CdDR1xztnB2D:NpTU7HQxSoci/0o61xztBC

Score

1^/10

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 808 wrote to memory of 1256	808	45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe	21
PID 808 wrote to memory of 1256	808	45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe	21
PID 808 wrote to memory of 1256	808	45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe	21
PID 808 wrote to memory of 1256	808	45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe	21
PID 808 wrote to memory of 1256	808	45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe	21
PID 808 wrote to memory of 1256	808	45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe	21
PID 808 wrote to memory of 1256	808	45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe	21
PID 808 wrote to memory of 1256	808	45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe	21
PID 808 wrote to memory of 1256	808	45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe	21

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:1256
- C:\Users\Admin\AppData\Local\Temp\45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe
  "C:\Users\Admin\AppData\Local\Temp\45bd17e57a8346385c4b87f51a178670_NeikiAnalytics.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:808

memory/808-9-0x0000000000400000-0x0000000000454000-memory.dmp

Filesize
336KB

Download
memory/1256-0-0x0000000002A40000-0x0000000002A41000-memory.dmp

Filesize
4KB

Download