7eb256c51a497cd7f90f0578db4cf45dfdeeddb52a217d2d78fded8603833fdc

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02/06/2024, 20:41

Target

627a240fe2fed8c1edac08b9e6f3ec60_NeikiAnalytics.exe
Size

73KB
MD5

627a240fe2fed8c1edac08b9e6f3ec60
SHA1

190afd0add426662a9e8048ff86bedb3e86cf9b0
SHA256

7eb256c51a497cd7f90f0578db4cf45dfdeeddb52a217d2d78fded8603833fdc
SHA512

6af6dfc1bb0ace53290be68387ed9e2c99949f18cda0fe84451eacf41b6fe703e6a741ef9194e70026b87cd6d65813ff6c995c35492ef12983c8947a2fd09539
SSDEEP

1536:hbSYv9ZK5QPqfhVWbdsmA+RjPFLC+e5hl2A0ZGUGf2g:hGYvHNPqfcxA+HFshl2AOg

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1956 wrote to memory of 1068	1956	627a240fe2fed8c1edac08b9e6f3ec60_NeikiAnalytics.exe	29
PID 1956 wrote to memory of 1068	1956	627a240fe2fed8c1edac08b9e6f3ec60_NeikiAnalytics.exe	29
PID 1956 wrote to memory of 1068	1956	627a240fe2fed8c1edac08b9e6f3ec60_NeikiAnalytics.exe	29
PID 1956 wrote to memory of 1068	1956	627a240fe2fed8c1edac08b9e6f3ec60_NeikiAnalytics.exe	29

C:\Users\Admin\AppData\Local\Temp\627a240fe2fed8c1edac08b9e6f3ec60_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\627a240fe2fed8c1edac08b9e6f3ec60_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1956
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c 00.exe
  2⤵
  PID:1068

memory/1956-5-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download