77a2b53914d08ac4db69c3c9431425fdaeb688f844d408ab75337f2a3fba75a7

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
13/06/2024, 06:32

Target

65d24494675ed3fc4d7b030f2147c7d0_NeikiAnalytics.dll
Size

4KB
MD5

65d24494675ed3fc4d7b030f2147c7d0
SHA1

808d0636f73fb26f456942bcd76bcdbe06993225
SHA256

77a2b53914d08ac4db69c3c9431425fdaeb688f844d408ab75337f2a3fba75a7
SHA512

92e67d78c9698920cdd44cfde8dd1eba714a806f17c8277de93581f484972a1b7c5c5c0ba6faf1902b19e4849a8fa1e8304a4276054b7f81698bd448a1b7e093
SSDEEP

24:e1GSYTe3Cee/0I/kPVCRVtc44MnXz+iM2u8kypgyXwVQwA3H4tROjngg1NW0C2gx:SWkO0IoyTnXz+ihZjok71WNkXq

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2392 wrote to memory of 2008	2392	rundll32.exe	28
PID 2392 wrote to memory of 2008	2392	rundll32.exe	28
PID 2392 wrote to memory of 2008	2392	rundll32.exe	28
PID 2392 wrote to memory of 2008	2392	rundll32.exe	28
PID 2392 wrote to memory of 2008	2392	rundll32.exe	28
PID 2392 wrote to memory of 2008	2392	rundll32.exe	28
PID 2392 wrote to memory of 2008	2392	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\65d24494675ed3fc4d7b030f2147c7d0_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2392
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\65d24494675ed3fc4d7b030f2147c7d0_NeikiAnalytics.dll,#1
  2⤵
  PID:2008