aefecce7e6c92e3390dc92578b4b5825775b9f53594ff274a547ffb93da7c7c0

Analysis

max time kernel
133s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 12:36

Target
a3ab5156defcb5138b83af7e92a4b010_NeikiAnalytics.exe
Size 79KB
Sample240603-ptbd1sef51
SHA256 aefecce7e6c92e3390dc92578b4b5825775b9f53594ff274a547ffb93da7c7c0
MD5 a3ab5156defcb5138b83af7e92a4b010
SHA1 8daa701d6eac629fa46b9a8a5bc2b036fd8457cf
SHA512 ddff76a4a4ef9c4c19d7adfae6c0d6cd48c027f37920b4769f435849c4b0af594ef142fee2550631f9dba4a2f86132421565b6993deecf90f346b5a02c1481b6
SSDEEP 1536:zvIqTisupYrVjLZhkpkxOQA8AkqUhMb2nuy5wgIP0CSJ+5yHB8GMGlZ5G:zvIqJxLnsGdqU7uy5w9WMyHN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
3392	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 5004	2216	a3ab5156defcb5138b83af7e92a4b010_NeikiAnalytics.exe	87
PID 2216 wrote to memory of 5004	2216	a3ab5156defcb5138b83af7e92a4b010_NeikiAnalytics.exe	87
PID 2216 wrote to memory of 5004	2216	a3ab5156defcb5138b83af7e92a4b010_NeikiAnalytics.exe	87
PID 5004 wrote to memory of 3392	5004	cmd.exe	88
PID 5004 wrote to memory of 3392	5004	cmd.exe	88
PID 5004 wrote to memory of 3392	5004	cmd.exe	88

C:\Users\Admin\AppData\Local\Temp\a3ab5156defcb5138b83af7e92a4b010_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\a3ab5156defcb5138b83af7e92a4b010_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5004
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:3392

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 a5a6ac64a56e6a4b9428586b4aae438005dc7da7cbb1636d7ab9d0cfb0ac35a0
MD5 1115df7657133d157c30c48c6a51e5bf
SHA1 16381fe1bbef2f7262d87f744514d6c3f93d4434
SHA512 ccad51ccef5311386b8058a234c52d87470ff55a7d2f273010a204cdddd77e2866af37fbac7136ba7fee0a510353d39072927dd101e4f1a72307dcd4c8295be9
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5yfB8GMGlZ5G:zv+vTpGdqU7uy5w9WMyfN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2216-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/3392-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download