5f9628cbb0c24e6cca2f2c61b838505568c8b0f21559164f08272fc5444d62ee

Analysis

max time kernel
91s
max time network
93s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
30/05/2024, 01:20

Target
5e6960a53d900f012a98d095448e3e30_NeikiAnalytics.exe
Size 79KB
Sample240530-bql5fsac28
SHA256 5f9628cbb0c24e6cca2f2c61b838505568c8b0f21559164f08272fc5444d62ee
MD5 5e6960a53d900f012a98d095448e3e30
SHA1 c98abdab74321e3ac7440c2a330b894bab66ddb6
SHA512 2c0151448d0bf26974e56e79644df4f49e5554b476286474cefb549eda1035d4508c4893497eb5ea6c3f43de08e2850695260072f527e592cb50e348cdfab581
SSDEEP 1536:zvNK3fWaJmLV0xOQA8AkqUhMb2nuy5wgIP0CSJ+5yHB8GMGlZ5G:zvAWa8LGdqU7uy5w9WMyHN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2508	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4360 wrote to memory of 892	4360	5e6960a53d900f012a98d095448e3e30_NeikiAnalytics.exe	82
PID 4360 wrote to memory of 892	4360	5e6960a53d900f012a98d095448e3e30_NeikiAnalytics.exe	82
PID 4360 wrote to memory of 892	4360	5e6960a53d900f012a98d095448e3e30_NeikiAnalytics.exe	82
PID 892 wrote to memory of 2508	892	cmd.exe	83
PID 892 wrote to memory of 2508	892	cmd.exe	83
PID 892 wrote to memory of 2508	892	cmd.exe	83

C:\Users\Admin\AppData\Local\Temp\5e6960a53d900f012a98d095448e3e30_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\5e6960a53d900f012a98d095448e3e30_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4360
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:892
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:2508

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 9a4d4f6ed9a390dae8b20828f70941d69a349f5c715e0b20db03a149a340b812
MD5 a66e330384ed26ff122d3a0ffd39089f
SHA1 67d31e54896ecfd054f530f45a08302712b007ec
SHA512 437ac82abcffb867eb3b04b57b273d3a5bbe8e4a57bc899740144aa503992b353d3f203deda60f02825e7fe588803b25be2aab71e06d99f4d4976694400110fc
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5ybB8GMGlZ5G:zv+vTpGdqU7uy5w9WMybN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2508-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/4360-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download