b0c5f675e265952947c50093f063f52cd37d3f48eedcb38080edab359fbee5d7

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 10:35

Target
75090e9dcab3531857402ea28b5ee8b0_NeikiAnalytics.exe
Size 500KB
Sample240613-mmxbssvepg
SHA256 b0c5f675e265952947c50093f063f52cd37d3f48eedcb38080edab359fbee5d7
MD5 75090e9dcab3531857402ea28b5ee8b0
SHA1 87297b2f486379fba323b5e5f208f61c40f6c9b0
SHA512 f066654311a9ead90f962083f8fd8772400f2255cb545815977b9c39fa31e27e8a821bc3a14ce1d77b9947eec5c29754bbf574b21ee6371d7f1415721da12385
SSDEEP 12288:8WBm+95nHfF2mgewFx5I8PLO1zemojT1kfgjdkA:8WBz95ndbgfx5I8PLO8kgjT
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
412	4C0D.tmp

Executes dropped EXE 1 IoCs

pid	Process
412	4C0D.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5084 wrote to memory of 412	5084	75090e9dcab3531857402ea28b5ee8b0_NeikiAnalytics.exe	82
PID 5084 wrote to memory of 412	5084	75090e9dcab3531857402ea28b5ee8b0_NeikiAnalytics.exe	82
PID 5084 wrote to memory of 412	5084	75090e9dcab3531857402ea28b5ee8b0_NeikiAnalytics.exe	82

C:\Users\Admin\AppData\Local\Temp\75090e9dcab3531857402ea28b5ee8b0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\75090e9dcab3531857402ea28b5ee8b0_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5084
- C:\Users\Admin\AppData\Local\Temp\4C0D.tmp
  "C:\Users\Admin\AppData\Local\Temp\4C0D.tmp" --pingC:\Users\Admin\AppData\Local\Temp\75090e9dcab3531857402ea28b5ee8b0_NeikiAnalytics.exe 3513B104D753A87246A480FD8E18B83CAB7CD7E19E026C3D105D92BD65C78015327F8B44895C93F8695B2899F9FBBF0722D313043A45A7B82E8A5955137B256B
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:412

4C0D.tmp

Path C:\Users\Admin\AppData\Local\Temp\4C0D.tmp
Size 500KB
SHA256 7162647c0e503718617e9de63febdc155d68834253b858fa8be98e07e6d5771d
MD5 be53ff7ca3be4fa06c53bccc72d69943
SHA1 cddfe6fb06743c10cad03b64a45d427c5d012387
SHA512 01b4284507d67a7231212fbfbdc0bcd6ea70dc54f50873f96848bfc1a232d89e3835cf1808648fb9338de210d326b365bdc8b21fdbeff5724adf457f2d1193b4
SSDEEP 12288:8WBm+95nHfF2mgewFx5wLBUWYQNDe7EvkJ1kfgjdkA:8WBz95ndbgfx5wlR5e7EngjT
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/412-7-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/412-8-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/5084-0-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/5084-6-0x0000000000400000-0x0000000000486000-memory.dmp

Download