6c66b92a3ceb8afa497834d8438c62dfa93c9c76dedbf467769ab7c637f5bc90

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 01:55

Target
552293c03327ac74145ac29b04294cd0_NeikiAnalytics.dll
Size 5KB
Sample240613-cckvxatfkk
SHA256 6c66b92a3ceb8afa497834d8438c62dfa93c9c76dedbf467769ab7c637f5bc90
MD5 552293c03327ac74145ac29b04294cd0
SHA1 64339e4fef54abd8b529beef41394bef569dee39
SHA512 a3c29a10cabe0cb3e8b8bb9d77e24f6c2aba940e90403e6fd74231a199ecae586ff3fe320ac1fb3775873e61a83ed2f8f28d4375a89ebdeea78096e5bf3a3abc
SSDEEP 96:hy859x0P8Mavy3KSa6qGfoYYJz1sAsRvahNSSQclS0f:F5oL6y3KN5GfoFJ1lshKsSQCS0f
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2908 wrote to memory of 1952	2908	rundll32.exe	81
PID 2908 wrote to memory of 1952	2908	rundll32.exe	81
PID 2908 wrote to memory of 1952	2908	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\552293c03327ac74145ac29b04294cd0_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2908
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\552293c03327ac74145ac29b04294cd0_NeikiAnalytics.dll,#1
  2⤵
  PID:1952