2677b46b30e4ac7ee199d0016d395e840b68fff4723327c98ffbfde18c87157e

Analysis

max time kernel
129s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03-06-2024 05:14

Target

9cada12cd5ba821592a6088539070a40_NeikiAnalytics.exe
Size

7.0MB
MD5

9cada12cd5ba821592a6088539070a40
SHA1

4eb11e3e967c73fd7cadd8ba71f7ac17026d7945
SHA256

2677b46b30e4ac7ee199d0016d395e840b68fff4723327c98ffbfde18c87157e
SHA512

5bd20a2c656d0e04065e6a7e9ad8dc1fa8e56228e496f6070b4caba8d8af711c37cb487e08c09778f64f345cc4d38820017f0dc8e397c03030ab0243574e4870
SSDEEP

98304:emhd1UryeglZMEJb3NV7wQqZUha5jtSyZIUbn:elTEl3N2QbaZtliK

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3596	4565.tmp

Executes dropped EXE 1 IoCs

pid	Process
3596	4565.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4136 wrote to memory of 3596	4136	9cada12cd5ba821592a6088539070a40_NeikiAnalytics.exe	85
PID 4136 wrote to memory of 3596	4136	9cada12cd5ba821592a6088539070a40_NeikiAnalytics.exe	85
PID 4136 wrote to memory of 3596	4136	9cada12cd5ba821592a6088539070a40_NeikiAnalytics.exe	85

C:\Users\Admin\AppData\Local\Temp\9cada12cd5ba821592a6088539070a40_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\9cada12cd5ba821592a6088539070a40_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4136
- C:\Users\Admin\AppData\Local\Temp\4565.tmp
  "C:\Users\Admin\AppData\Local\Temp\4565.tmp" --splashC:\Users\Admin\AppData\Local\Temp\9cada12cd5ba821592a6088539070a40_NeikiAnalytics.exe 7EB952DBC35E6F47F5C0D5C6BB8C4812A3164CE55080971C4207BB0EC559FBCB05ACBAB8AF01A4E0F93391F75EDFF95806FCD1973F9EE0C1EB6A75CE23D6C1F6
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3596

C:\Users\Admin\AppData\Local\Temp\4565.tmp

Filesize
7.0MB

MD5
6d13138490a0be8038ed0225203c144d

SHA1
f49fdbac07f19b41fd42a2519a853610c1a1e9fd

SHA256
49e3d5e1bb4721624ff3b9588794597f24da4495b33e0e56b8288c0a9cda44e3

SHA512
ae9e431f248ce439a97a39e4184e8145d954135f3d6226956b73ee7eb4b4f8e924a7b910109fd78988c7a9463b6a29f1be9580eee3eb4970df4a8a856575c391

Download Submit
memory/3596-5-0x0000000000400000-0x0000000000849000-memory.dmp

Filesize
4.3MB

Download
memory/4136-0-0x0000000000400000-0x0000000000849000-memory.dmp

Filesize
4.3MB

Download