41126aa640e962138585abef36e5859792a7bc2e27653f4b1e8398dcf45dca3d

Analysis

max time kernel
133s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 12:17

Target
534b7bb9bbe85679e75f71b2ae9ba800_NeikiAnalytics.exe
Size 79KB
Sample240529-pgb5saea4w
SHA256 41126aa640e962138585abef36e5859792a7bc2e27653f4b1e8398dcf45dca3d
MD5 534b7bb9bbe85679e75f71b2ae9ba800
SHA1 219e16d332a9551084b843bdb3f0ee83d50fbe28
SHA512 b5484a9bb16fcb526881e7a1391ded8f8a2baa06f470034fecb763d7c1487f42a9455accc684cf7c7c6919976a0568a68b451b08e5bd68ae3bf59f7a2f9e603e
SSDEEP 1536:zvwM17sLxI8XRG5JoOQA8AkqUhMb2nuy5wgIP0CSJ+5ydB8GMGlZ5G:zvxALSdGdqU7uy5w9WMydN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
1088	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2784 wrote to memory of 2308	2784	534b7bb9bbe85679e75f71b2ae9ba800_NeikiAnalytics.exe	83
PID 2784 wrote to memory of 2308	2784	534b7bb9bbe85679e75f71b2ae9ba800_NeikiAnalytics.exe	83
PID 2784 wrote to memory of 2308	2784	534b7bb9bbe85679e75f71b2ae9ba800_NeikiAnalytics.exe	83
PID 2308 wrote to memory of 1088	2308	cmd.exe	84
PID 2308 wrote to memory of 1088	2308	cmd.exe	84
PID 2308 wrote to memory of 1088	2308	cmd.exe	84

C:\Users\Admin\AppData\Local\Temp\534b7bb9bbe85679e75f71b2ae9ba800_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\534b7bb9bbe85679e75f71b2ae9ba800_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2784
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2308
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:1088

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 ef4f7954c17ec011d15667779d9a156e0b79e88f1e4fc65e861b0de0bd18931c
MD5 8156b5bda3a015c54e479531ff55dc4d
SHA1 63eb010bec62ef2a2537d1732f1c3292ed5809e7
SHA512 277d4418da244b97806be61e4eb2d4cc3f1dc2703d0ee3c3f5db3e5aabb97f054712ec6dca3c3f6dcc60c4afe13603eb431a1990e130d95ce733a152a94d3429
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5y5B8GMGlZ5G:zv+vTpGdqU7uy5w9WMy5N5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1088-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/2784-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download