a14312a6c785fff0136c7a21715348fdf1337a98a71ea41743bede82e336947f

Analysis

max time kernel
51s
max time network
58s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 01:58

Target
555be35579f2cc0bbce10cc6847c7760_NeikiAnalytics.dll
Size 44KB
Sample240613-cdwnsszgpg
SHA256 a14312a6c785fff0136c7a21715348fdf1337a98a71ea41743bede82e336947f
MD5 555be35579f2cc0bbce10cc6847c7760
SHA1 408b4ba8628a1868f3ee5895de10cdff85dd0dca
SHA512 0728b2cef5e2bb4003ab0d14b37e1c80dfab94197448019cdc046257e17425c2852a66e8e36802545744befb1b6edb195af433378b6b50a41c618487ad06064e
SSDEEP 384:JPAb3GBThfmkfJHC8C7jDjCr7jCs87l3Dyu1SYr1z2uV+cA/8odwqtKUK4:a2TVmkf9eD2rytDXS41z29/8oRr
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3156 wrote to memory of 1460	3156	rundll32.exe	81
PID 3156 wrote to memory of 1460	3156	rundll32.exe	81
PID 3156 wrote to memory of 1460	3156	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\555be35579f2cc0bbce10cc6847c7760_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3156
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\555be35579f2cc0bbce10cc6847c7760_NeikiAnalytics.dll,#1
  2⤵
  PID:1460