c316e9fe42831f5ce1d78fe56f4eec6c01514a49e47d46c66393efe70f34dd5c

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
30-05-2024 11:12

Target

33f168dfb2637460c972be53287d0db0_NeikiAnalytics.exe
Size

731KB
MD5

33f168dfb2637460c972be53287d0db0
SHA1

16d098137a796a8646a81be8c8bbc3556b576df0
SHA256

c316e9fe42831f5ce1d78fe56f4eec6c01514a49e47d46c66393efe70f34dd5c
SHA512

a78c86de7672af9115706a05ae986db6883353dc6fff52de8f6eab67a33baf72321440f5b7e5f28888e734e9b4762971f29e7b0407f99ef77566e8a788cefd78
SSDEEP

6144:Fp19SmYRZbsuSBs3ojpe6aABlwZFsr5pOGJr3eRqk3tJc+xZRtiKzvzaOKIeM87B:Fp1EPZbsu2s3ojpe6aeSg3DeRqkUWm

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

33f168dfb2637460c972be53287d0db0_NeikiAnalytics.exe

description	pid	process	target process
PID 2220 wrote to memory of 1564	2220	33f168dfb2637460c972be53287d0db0_NeikiAnalytics.exe	WerFault.exe
PID 2220 wrote to memory of 1564	2220	33f168dfb2637460c972be53287d0db0_NeikiAnalytics.exe	WerFault.exe
PID 2220 wrote to memory of 1564	2220	33f168dfb2637460c972be53287d0db0_NeikiAnalytics.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\33f168dfb2637460c972be53287d0db0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\33f168dfb2637460c972be53287d0db0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2220 -s 76
  2⤵
  PID:1564