2242f33e64e3703c42d82c564774dec821ab9faf8aee698663f29f18376cdfeb

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
03/06/2024, 02:39

Target

988a71b833f8072cd80e5f1bd8740910_NeikiAnalytics.exe
Size

427KB
MD5

988a71b833f8072cd80e5f1bd8740910
SHA1

74c0d3f794aff7e3a8dd2be96287d8fecf5b9e1a
SHA256

2242f33e64e3703c42d82c564774dec821ab9faf8aee698663f29f18376cdfeb
SHA512

46727db05531669856f28fcc226432bbf527ecad087a9e31688a4e3fe3978537ca0dd5029b654a56ebdfcb655686d7343affc2bce6c3c4762df1f23b2744370b
SSDEEP

6144:ZFz+DhF7TLUriJuZg6yXJConIpCHJmVZlZlkqH7ADAO2olXetoucxjjy:Hz+XTo1gJCTwHJmVZlDkAokOTy

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3024	3000	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3000 wrote to memory of 3024	3000	988a71b833f8072cd80e5f1bd8740910_NeikiAnalytics.exe	28
PID 3000 wrote to memory of 3024	3000	988a71b833f8072cd80e5f1bd8740910_NeikiAnalytics.exe	28
PID 3000 wrote to memory of 3024	3000	988a71b833f8072cd80e5f1bd8740910_NeikiAnalytics.exe	28
PID 3000 wrote to memory of 3024	3000	988a71b833f8072cd80e5f1bd8740910_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\988a71b833f8072cd80e5f1bd8740910_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\988a71b833f8072cd80e5f1bd8740910_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3000
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3000 -s 172
  2⤵
  - Program crash
  PID:3024