3eceb77d39b002fdb9154aeff3d4853463f922c35a312a45cf083b0343411911

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
08/06/2024, 19:39

Target

71dd174f885a6780081a6011915fc8c0_NeikiAnalytics.dll
Size

6KB
MD5

71dd174f885a6780081a6011915fc8c0
SHA1

1a13587b2e2c02f05f1e1687272597cb1fe682e5
SHA256

3eceb77d39b002fdb9154aeff3d4853463f922c35a312a45cf083b0343411911
SHA512

0eec0f8aa3e424edb22f514d7839da51819371cce8b5c8c3ae2de817ac0457e566d62a71210c1aba3b0fd019e415454561aa6fab2aa167a195288ad578eeae33
SSDEEP

96:DixZjmjtjd8jPjcZGR5TIcylrfBwDCU31DRiieCMCR:unSR6bgYrqrfuMieC

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3328 wrote to memory of 868	3328	rundll32.exe	82
PID 3328 wrote to memory of 868	3328	rundll32.exe	82
PID 3328 wrote to memory of 868	3328	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\71dd174f885a6780081a6011915fc8c0_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3328
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\71dd174f885a6780081a6011915fc8c0_NeikiAnalytics.dll,#1
  2⤵
  PID:868