7d4992dab3189c70780b4474f2e9e4425c68c2316ee27a2fb2f2547a5b593f65

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01/06/2024, 00:31

Target

8648e54fe99241b48c04cda02cb8a670_NeikiAnalytics.exe
Size

73KB
MD5

8648e54fe99241b48c04cda02cb8a670
SHA1

20ce268ed15538717f934d36456e0a381ac3bba4
SHA256

7d4992dab3189c70780b4474f2e9e4425c68c2316ee27a2fb2f2547a5b593f65
SHA512

e3a1de0219f2f925c1fe110b31a5bdcc8542b85ab1eb6ca7ea416b7f0bd114d70c11e04cf240ecb8e65814dd10416f5f9bc5fa36ff5db0658d978ea11ab25cdc
SSDEEP

1536:hbSYv9ZK5QPqfhVWbdsmA+RjPFLC+e5hL0ZGUGf2g:hGYvHNPqfcxA+HFshLOg

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2952 wrote to memory of 1684	2952	8648e54fe99241b48c04cda02cb8a670_NeikiAnalytics.exe	29
PID 2952 wrote to memory of 1684	2952	8648e54fe99241b48c04cda02cb8a670_NeikiAnalytics.exe	29
PID 2952 wrote to memory of 1684	2952	8648e54fe99241b48c04cda02cb8a670_NeikiAnalytics.exe	29
PID 2952 wrote to memory of 1684	2952	8648e54fe99241b48c04cda02cb8a670_NeikiAnalytics.exe	29

C:\Users\Admin\AppData\Local\Temp\8648e54fe99241b48c04cda02cb8a670_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\8648e54fe99241b48c04cda02cb8a670_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2952
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c 00.exe
  2⤵
  PID:1684

memory/2952-5-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download