660a73a0a287cb43442ec6419ff1dc913d0ea8253fe01fec92bdf4af3f7a4ab3

Analysis

max time kernel
92s
max time network
99s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 10:33

Target
5163f1ad4247fe492beb52eee5cadeb0_NeikiAnalytics.exe
Size 79KB
Sample240529-mlpwbsbf5s
SHA256 660a73a0a287cb43442ec6419ff1dc913d0ea8253fe01fec92bdf4af3f7a4ab3
MD5 5163f1ad4247fe492beb52eee5cadeb0
SHA1 a0a2015c0c23aa5782e4c79845ae39fbe30a83a5
SHA512 d3157f675d57a6ea03ef4d5535e048f3cf7fbc1178f08d402f4131f357c1bf1f7d17d340f914b1f3f936a8cfce094dc8c7a5ecdb2f0daa734aa2a0cfe0510e2c
SSDEEP 1536:zvoO0/7E2BzTQTFOQA8AkqUhMb2nuy5wgIP0CSJ+5yZB8GMGlZ5G:zvL0/Y2lTQTcGdqU7uy5w9WMyZN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
744	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2564 wrote to memory of 2824	2564	5163f1ad4247fe492beb52eee5cadeb0_NeikiAnalytics.exe	84
PID 2564 wrote to memory of 2824	2564	5163f1ad4247fe492beb52eee5cadeb0_NeikiAnalytics.exe	84
PID 2564 wrote to memory of 2824	2564	5163f1ad4247fe492beb52eee5cadeb0_NeikiAnalytics.exe	84
PID 2824 wrote to memory of 744	2824	cmd.exe	85
PID 2824 wrote to memory of 744	2824	cmd.exe	85
PID 2824 wrote to memory of 744	2824	cmd.exe	85

C:\Users\Admin\AppData\Local\Temp\5163f1ad4247fe492beb52eee5cadeb0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\5163f1ad4247fe492beb52eee5cadeb0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2564
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2824
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:744

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 7fbace5744ee7050ce7bf79a66e4dfd96516c5a7e0815c50cfa06533132636c9
MD5 1fff782155bf54cce66131b4ffb3dce0
SHA1 b1d8a1e5a22a102b3731dea2e3d2e8f719b43edd
SHA512 18f0de011cc8321e80545e111e0e0f54afa16c878ef9789a386400af647ec6fe9d2e3644497262d379112b5c4bae46e00206f60b34020c584ca68f208ca5815e
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5ytB8GMGlZ5G:zv+vTpGdqU7uy5w9WMytN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/744-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/2564-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download