93c6446b4cf26d89309b76de754b4bcf740b1fa8153c5c61fe7cd9fbe296dc6d

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 10:36

Target
a04792b2f8513fb3e9adbcae95aaf2d0_NeikiAnalytics.exe
Size 79KB
Sample240603-mnd7lsbe5w
SHA256 93c6446b4cf26d89309b76de754b4bcf740b1fa8153c5c61fe7cd9fbe296dc6d
MD5 a04792b2f8513fb3e9adbcae95aaf2d0
SHA1 e58548c94341bb71b47b09d6ba1256cfe2f9c4a2
SHA512 b73bdefd464ebaf489a67eb421756b5a43ccbd69692782bb2d23118efd0b74782234c62866994b40b15fda15cdaa43c2f6364223dc64d5fb44525fa532381e7e
SSDEEP 1536:zvlIj2RxFr51zXOQA8AkqUhMb2nuy5wgIP0CSJ+5ypB8GMGlZ5G:zvqjWFr+GdqU7uy5w9WMypN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
2176	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 3144 wrote to memory of 3912	3144	a04792b2f8513fb3e9adbcae95aaf2d0_NeikiAnalytics.exe	84
PID 3144 wrote to memory of 3912	3144	a04792b2f8513fb3e9adbcae95aaf2d0_NeikiAnalytics.exe	84
PID 3144 wrote to memory of 3912	3144	a04792b2f8513fb3e9adbcae95aaf2d0_NeikiAnalytics.exe	84
PID 3912 wrote to memory of 2176	3912	cmd.exe	85
PID 3912 wrote to memory of 2176	3912	cmd.exe	85
PID 3912 wrote to memory of 2176	3912	cmd.exe	85

C:\Users\Admin\AppData\Local\Temp\a04792b2f8513fb3e9adbcae95aaf2d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\a04792b2f8513fb3e9adbcae95aaf2d0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3144
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3912
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:2176

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 2f7dc4d70f4c94b05f2882b0141182a53e11cfb24c54a88dcf800c78c9a5b85e
MD5 f259417458e26a2e564afd0746dd58b2
SHA1 d54009bb71d23d8905c4aa21ca221d6ba48f473f
SHA512 e8ac79b3605b62e6232c61927e0a2ca98cbbeca8d99dd16e44ed60538664f7d1100cd6fae64bde43f9c6392626296bb6e51014d5384b23bb4f3ad127781158c4
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5yNB8GMGlZ5G:zv+vTpGdqU7uy5w9WMyNN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2176-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/3144-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download