05d35fea89b5d9d8bb75625f3f91a13e896eb5ff674df8001036c991b4f21664

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06-06-2024 17:56

Target

282e8ea96c8cce065fb95fb7a10a2270_NeikiAnalytics.exe
Size

485KB
MD5

282e8ea96c8cce065fb95fb7a10a2270
SHA1

96a62e58771c8abbc97ba078890119a3dbc0af8d
SHA256

05d35fea89b5d9d8bb75625f3f91a13e896eb5ff674df8001036c991b4f21664
SHA512

9892c75db44c7e3b75cd99934a98a11bf9662dd118bb77f168f025dafc8f319fc176780e7d77d23c7b94bf50e11ed86adafd302452e51aa8f17c6006ab5dd061
SSDEEP

6144:C7WQ0j4ltziolIGlnE2dFDErlBu0R+J5JlLgPYfq8ZF02IlLZDU0nXe:qi4lZioxEfu0R+J5JlLgPbDU0n

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1208	2304	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2304 wrote to memory of 1208	2304	282e8ea96c8cce065fb95fb7a10a2270_NeikiAnalytics.exe	28
PID 2304 wrote to memory of 1208	2304	282e8ea96c8cce065fb95fb7a10a2270_NeikiAnalytics.exe	28
PID 2304 wrote to memory of 1208	2304	282e8ea96c8cce065fb95fb7a10a2270_NeikiAnalytics.exe	28
PID 2304 wrote to memory of 1208	2304	282e8ea96c8cce065fb95fb7a10a2270_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\282e8ea96c8cce065fb95fb7a10a2270_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\282e8ea96c8cce065fb95fb7a10a2270_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2304
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2304 -s 156
  2⤵
  - Program crash
  PID:1208

memory/2304-0-0x00000000013C0000-0x0000000001443000-memory.dmp

Filesize
524KB

Download