c0dd0916241dc2a2e8d8e5937e0742bc8bfce54b2e7a49fbfa78ac6b8037544c

Analysis

max time kernel
133s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 06:36

Target
4988ee29d8a166377ab15976fba6d0f0_NeikiAnalytics.exe
Size 7.0MB
Sample240602-hc6ehaee36
SHA256 c0dd0916241dc2a2e8d8e5937e0742bc8bfce54b2e7a49fbfa78ac6b8037544c
MD5 4988ee29d8a166377ab15976fba6d0f0
SHA1 b1d30df6e62dd6b2c80c0b53c9f364ccca826004
SHA512 b2e671d5c054219717b421265bf9d1dbf42f6c1cb17787578bfa4c3421fe32936593a4e47e827df1136ac3595923a5b2c475ae852b4f9cd8e9114f9adb2b64cb
SSDEEP 98304:emhd1UryepshXDZG6grScV7wQqZUha5jtSyZIUbn:elCDcjz2QbaZtliK
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2492	46DC.tmp

Executes dropped EXE 1 IoCs

pid	Process
2492	46DC.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1636 wrote to memory of 2492	1636	4988ee29d8a166377ab15976fba6d0f0_NeikiAnalytics.exe	84
PID 1636 wrote to memory of 2492	1636	4988ee29d8a166377ab15976fba6d0f0_NeikiAnalytics.exe	84
PID 1636 wrote to memory of 2492	1636	4988ee29d8a166377ab15976fba6d0f0_NeikiAnalytics.exe	84

C:\Users\Admin\AppData\Local\Temp\4988ee29d8a166377ab15976fba6d0f0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\4988ee29d8a166377ab15976fba6d0f0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1636
- C:\Users\Admin\AppData\Local\Temp\46DC.tmp
  "C:\Users\Admin\AppData\Local\Temp\46DC.tmp" --splashC:\Users\Admin\AppData\Local\Temp\4988ee29d8a166377ab15976fba6d0f0_NeikiAnalytics.exe 4103AC0B05F129E11F348CFF6BA17B43D07E8A5FB3A9BFE2148DEE20B445AFF3BFE87947C00F44210E102C5E7710E4E57FADCEE6B4893544A69C33FC2E200CBF
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:2492

46DC.tmp

Path C:\Users\Admin\AppData\Local\Temp\46DC.tmp
Size 7.0MB
SHA256 4a722a476a6ce45b0559d82d5f24647032b56ae6ab19ade287f375b07b4d9c44
MD5 941f83032d5f07ca868c8c857c08a31f
SHA1 919e3930c2fda4b2adfb3df38d8d570aa49e7298
SHA512 9852ffb5b5d06f02c40adba0370ddcbbdba1801f2d1dfdb001a791be2ef65b05f0ba10d69ca4a32369acdbfe2b87514e474fab2903746b49c1909164d78e9c23
SSDEEP 98304:emhd1UryesKWOJOmcrKnArV7wQqZUha5jtSyZIUbn:elMrOJOmm8Ar2QbaZtliK
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1636-0-0x0000000000400000-0x0000000000849000-memory.dmp

Download

memory/2492-5-0x0000000000400000-0x0000000000849000-memory.dmp

Download