ea1f8986878bd9dfb9ef58b14b297e1fbb291bcd619601f1da13d224d61625d7

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 04:49

Target
5fc8fe050ca3eac1352e4c2523cfc650_NeikiAnalytics.exe
Size 4.2MB
Sample240613-ff3rnsvcrh
SHA256 ea1f8986878bd9dfb9ef58b14b297e1fbb291bcd619601f1da13d224d61625d7
MD5 5fc8fe050ca3eac1352e4c2523cfc650
SHA1 178152a3d7fce07f272efa61628df9124fc5debc
SHA512 a96135ab13ea939dcfde4d7e3a27ac5bf6a6ecc085d493e485c0c65f33f8d6e4e5f265c5738d5a1b5c36cb8fca6674bc98c80a49721ef2157baa5c1604a08a1f
SSDEEP 98304:Cmhd1UryezAo2CKezhr4u52PmbDVLUjH5oxFbxhVLUjH5oxFbx:ClTAZSNrV4gDVUjZEdhVUjZEd
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3908	3C8C.tmp

Executes dropped EXE 1 IoCs

pid	Process
3908	3C8C.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2668 wrote to memory of 3908	2668	5fc8fe050ca3eac1352e4c2523cfc650_NeikiAnalytics.exe	85
PID 2668 wrote to memory of 3908	2668	5fc8fe050ca3eac1352e4c2523cfc650_NeikiAnalytics.exe	85
PID 2668 wrote to memory of 3908	2668	5fc8fe050ca3eac1352e4c2523cfc650_NeikiAnalytics.exe	85

C:\Users\Admin\AppData\Local\Temp\5fc8fe050ca3eac1352e4c2523cfc650_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\5fc8fe050ca3eac1352e4c2523cfc650_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2668
- C:\Users\Admin\AppData\Local\Temp\3C8C.tmp
  "C:\Users\Admin\AppData\Local\Temp\3C8C.tmp" --splashC:\Users\Admin\AppData\Local\Temp\5fc8fe050ca3eac1352e4c2523cfc650_NeikiAnalytics.exe ED693A5F7EC24AEE1A3991AC356CFD9E8DC35CF8DD40522706CF8156B3AD9979223F6DED85C9ACF9527466E54EE5B9A20BDE5A1267CA2C7BD37C0FEAA5A5FE2B
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3908

3C8C.tmp

Path C:\Users\Admin\AppData\Local\Temp\3C8C.tmp
Size 4.2MB
SHA256 5722e9b32c13326dd20a9c50e410f6da1cb190bbd6622edc9a1db65146b7d6a3
MD5 2e4bbced2104c252b22fbc0256912093
SHA1 b6f487ccf89c220ce6561aeeadff51aef0b854b7
SHA512 7944601be031d54eb741b8f8b254c0347507c17be650000a5a0efd4158e2f5f216721c19c081423152a09b94ab799373ad2424c4ccfdae7a0fc7e823f8a81b15
SSDEEP 98304:Cmhd1Uryei7AQCFN85DGPJoeLVLUjH5oxFbxhVLUjH5oxFbx:ClC7AHe5aueLVUjZEdhVUjZEd
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/2668-0-0x0000000000400000-0x0000000000849000-memory.dmp

Download

memory/3908-5-0x0000000000400000-0x0000000000849000-memory.dmp

Download