c29c2d2bc62a5e31a43e66ce48dbc6b7c9b0c5f38d29012319dd969e972f6cd5

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 14:02

Target
a5bc8af19339c2bccdfd0fc6a3beb4b0_NeikiAnalytics.exe
Size 79KB
Sample240603-rb8ynsab98
SHA256 c29c2d2bc62a5e31a43e66ce48dbc6b7c9b0c5f38d29012319dd969e972f6cd5
MD5 a5bc8af19339c2bccdfd0fc6a3beb4b0
SHA1 2537914a2612580b12d20c575ec41ccb9a96f0e1
SHA512 bdf30ff377b78d4008382523400020a45447d00812a6eecb59615f63a34f58a7bd95e473d4f53d12d572967f498033900da6922ca1228c2fec39613c8932ba54
SSDEEP 1536:zvmMrCRpMyzLRMeNxOQA8AkqUhMb2nuy5wgIP0CSJ+5yJB8GMGlZ5G:zvUhhAGdqU7uy5w9WMyJN5G
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
716	[email protected]

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1104 wrote to memory of 1192	1104	a5bc8af19339c2bccdfd0fc6a3beb4b0_NeikiAnalytics.exe	82
PID 1104 wrote to memory of 1192	1104	a5bc8af19339c2bccdfd0fc6a3beb4b0_NeikiAnalytics.exe	82
PID 1104 wrote to memory of 1192	1104	a5bc8af19339c2bccdfd0fc6a3beb4b0_NeikiAnalytics.exe	82
PID 1192 wrote to memory of 716	1192	cmd.exe	83
PID 1192 wrote to memory of 716	1192	cmd.exe	83
PID 1192 wrote to memory of 716	1192	cmd.exe	83

C:\Users\Admin\AppData\Local\Temp\a5bc8af19339c2bccdfd0fc6a3beb4b0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\a5bc8af19339c2bccdfd0fc6a3beb4b0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1104
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c [email protected]
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1192
- - C:\Users\Admin\AppData\Local\Temp\[email protected]
    [email protected]
    3⤵
    - Executes dropped EXE
    PID:716

Path C:\Users\Admin\AppData\Local\Temp\[email protected]
Size 79KB
SHA256 51fa9f109529e636a21173d95bacba17625d80ebb5b97ed25e6b3e2d6b57c6ea
MD5 5435f2ab3c09964d637e58e74b5c37b3
SHA1 73fd9ad0e71899471929e13b77c3919a67b53cdc
SHA512 6a97c2cfbc9b8502e014299c60f9a68393fc79bb98bf2b3edcbdc587f3adbe404632de58ef79e95f17d5bce82eb45e2ffe9adcbef27388e159da5d2c551eff22
SSDEEP 1536:zv+vF0ocOQA8AkqUhMb2nuy5wgIP0CSJ+5yDB8GMGlZ5G:zv+vTpGdqU7uy5w9WMyDN5G
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/716-5-0x0000000000400000-0x000000000041B000-memory.dmp

Download

memory/1104-6-0x0000000000400000-0x000000000041B000-memory.dmp

Download