8b6bdf93cd973788f4b3174083c3150963f4f911af322d638ee0e6d4e34e3cf7

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01/06/2024, 08:13

Target

93ffb12f995adafcba04bcfd82a81b70_NeikiAnalytics.exe
Size

180KB
MD5

93ffb12f995adafcba04bcfd82a81b70
SHA1

85c95d16234aabee26d37bf6cdd56c2d54448ffb
SHA256

8b6bdf93cd973788f4b3174083c3150963f4f911af322d638ee0e6d4e34e3cf7
SHA512

f28c6c89a52e0d40535142039d46a7a0cdd27794a9180b3438b471bdd9c0d769c8591294833e00a4018b586ceb78f57cda39ead8bc7bb5fb544a22577179b2bc
SSDEEP

3072:gTbm4wv0zIdlpmBtTcW62Rau6wENU9QwEHfIzVbuZ:gnFtzIdlMtTcIRauHz9hEHf+buZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2832	2956	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2956 wrote to memory of 2832	2956	93ffb12f995adafcba04bcfd82a81b70_NeikiAnalytics.exe	28
PID 2956 wrote to memory of 2832	2956	93ffb12f995adafcba04bcfd82a81b70_NeikiAnalytics.exe	28
PID 2956 wrote to memory of 2832	2956	93ffb12f995adafcba04bcfd82a81b70_NeikiAnalytics.exe	28
PID 2956 wrote to memory of 2832	2956	93ffb12f995adafcba04bcfd82a81b70_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\93ffb12f995adafcba04bcfd82a81b70_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\93ffb12f995adafcba04bcfd82a81b70_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2956
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2956 -s 36
  2⤵
  - Program crash
  PID:2832

memory/2956-0-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download