05ca799246015c5809b0208f0c678cd3a01b8741faf1ed96d0d91101a6e15cf5

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 10:44

Target
51bfaa4d3555eb49f60eed660a6d0710_NeikiAnalytics.exe
Size 79KB
Sample240529-ms95vacf66
SHA256 05ca799246015c5809b0208f0c678cd3a01b8741faf1ed96d0d91101a6e15cf5
MD5 51bfaa4d3555eb49f60eed660a6d0710
SHA1 7a5ba20d94caab3c860c532c89ca83059a74268c
SHA512 26e46a6758fd7231b19447914d9d75944d417c1b57983ae44614a941ba319c4905fba5a24d9f34456023cd98c9ca720fcf92e29691bb1c199d371b1d00e63e0e
SSDEEP 1536:zvYP9EPgBWhAOQA8AkqUhMb2nuy5wgIP0CSJ+5ysB8GMGlZ5G:zv091B0GdqU7uy5w9WMysN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1460	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1256 wrote to memory of 3260	1256	51bfaa4d3555eb49f60eed660a6d0710_NeikiAnalytics.exe	82
PID 1256 wrote to memory of 3260	1256	51bfaa4d3555eb49f60eed660a6d0710_NeikiAnalytics.exe	82
PID 1256 wrote to memory of 3260	1256	51bfaa4d3555eb49f60eed660a6d0710_NeikiAnalytics.exe	82
PID 3260 wrote to memory of 1460	3260	cmd.exe	83
PID 3260 wrote to memory of 1460	3260	cmd.exe	83
PID 3260 wrote to memory of 1460	3260	cmd.exe	83

C:\Users\Admin\AppData\Local\Temp\51bfaa4d3555eb49f60eed660a6d0710_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\51bfaa4d3555eb49f60eed660a6d0710_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1256
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3260
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:1460

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 a6c5a529be46fa6514edaa9d74450988bb0460dd5aed9c0746eb8911758e7f33
MD5 5981a74d8f6857df806a006d2e2b7b03
SHA1 5b1e031935cc1dd407244d76b3461991f8d42917
SHA512 9ac0b251101434116d5ab7dfd0a96fc95e8a8e639a2670b81a3ae79e9883bee1335aabef9e917fa773ec74197c160abed434a876c34e269658ddcc7154a2492a
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5y2B8GMGlZ5G:zv+vTpGdqU7uy5w9WMy2N5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1256-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/1460-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download