093c7cb4622109d152954de7bc2fc2e9e54f8598f77524fcbf8395ede640c840

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
04-06-2024 02:39

Target

232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe
Size

2.1MB
MD5

232b1681f41cf550e9b6c1f14f6a96a0
SHA1

a668635a42647bc9fe7e359fe8807f9437b75e47
SHA256

093c7cb4622109d152954de7bc2fc2e9e54f8598f77524fcbf8395ede640c840
SHA512

3c573e88f1ca17bed00dbe6128ea3e83071daaa7003aa2d9947dc5f7cd1f4eff641a389c776801e6ee826508ddea2dd6897e991207a9fd52a58deebd74564905
SSDEEP

49152:vY3RmRqN2NPGtX6EkzhB6cqm4Y1+96rpOjsh3ANkTTl:umRqN2NPWkzKcn+96cQ3AM

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2968	2944	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2944 wrote to memory of 2968	2944	232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe	28
PID 2944 wrote to memory of 2968	2944	232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe	28
PID 2944 wrote to memory of 2968	2944	232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe	28
PID 2944 wrote to memory of 2968	2944	232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2944
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 116
  2⤵
  - Program crash
  PID:2968