08bf4eb4613687a50ed47faee6904a4178e6ce0d6541abac5a0990e77c661eff

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
02/06/2024, 00:52

Target

16e9b9be21856dc214578908b3106120_NeikiAnalytics.exe
Size

73KB
MD5

16e9b9be21856dc214578908b3106120
SHA1

4bd50a40e75377d4c3fc9ada0593f0a5007603c9
SHA256

08bf4eb4613687a50ed47faee6904a4178e6ce0d6541abac5a0990e77c661eff
SHA512

005d20f004c10cb1aa75fa82c6636e12ed29c7fb5aa887f20f34f0bff7fc21f73c992b89ac514e1bbbde61678620b04b37ff5d6ca40c616a70e3d58277fb3379
SSDEEP

1536:hbSYv9ZK5QPqfhVWbdsmA+RjPFLC+e5hH0ZGUGf2g:hGYvHNPqfcxA+HFshHOg

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 2144	3040	16e9b9be21856dc214578908b3106120_NeikiAnalytics.exe	29
PID 3040 wrote to memory of 2144	3040	16e9b9be21856dc214578908b3106120_NeikiAnalytics.exe	29
PID 3040 wrote to memory of 2144	3040	16e9b9be21856dc214578908b3106120_NeikiAnalytics.exe	29
PID 3040 wrote to memory of 2144	3040	16e9b9be21856dc214578908b3106120_NeikiAnalytics.exe	29

C:\Users\Admin\AppData\Local\Temp\16e9b9be21856dc214578908b3106120_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\16e9b9be21856dc214578908b3106120_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c 00.exe
  2⤵
  PID:2144

memory/3040-5-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download