Analysis
- max time kernel
144s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
03/06/2024, 11:22
General
- Target a1a70c97ec7f7c48cc35e7357cac9890_NeikiAnalytics.dll
- Size 1.6MB
- Sample240603-ngv28aea32
- SHA256 d21f280e6f47985a54377251364f1c409691d3102d71c739df68179219b50bc8
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a1a70c97ec7f7c48cc35e7357cac9890_NeikiAnalytics.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a1a70c97ec7f7c48cc35e7357cac9890_NeikiAnalytics.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2348-0-0x0000000000AE0000-0x0000000000AE6000-memory.dmp
memory/2348-1-0x0000000010000000-0x0000000010199000-memory.dmp
memory/2348-3-0x0000000002830000-0x0000000002971000-memory.dmp
memory/2348-5-0x0000000002980000-0x0000000002AA2000-memory.dmp
memory/2348-4-0x0000000002980000-0x0000000002AA2000-memory.dmp
memory/2348-7-0x0000000002980000-0x0000000002AA2000-memory.dmp
memory/2348-8-0x0000000002980000-0x0000000002AA2000-memory.dmp
memory/2348-9-0x0000000002AB0000-0x000000000416B000-memory.dmp
memory/2348-10-0x0000000004170000-0x0000000004280000-memory.dmp
memory/2348-12-0x0000000004280000-0x000000000439B000-memory.dmp
memory/2348-11-0x0000000004280000-0x000000000439B000-memory.dmp
memory/2348-14-0x0000000004280000-0x000000000439B000-memory.dmp
memory/2348-15-0x0000000000820000-0x0000000000832000-memory.dmp
memory/2348-16-0x000000007C640000-0x000000007C687000-memory.dmp