5484d905819a5ed48da3de69cc86fb3d48528793882a9d70538fa9be26629274

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 14:08

Target
827f2ccdc2fca458fa61f43186333460_NeikiAnalytics.exe
Size 5.4MB
Sample240613-rfm7rssbmb
SHA256 5484d905819a5ed48da3de69cc86fb3d48528793882a9d70538fa9be26629274
MD5 827f2ccdc2fca458fa61f43186333460
SHA1 57f152ae2693e013b0239d9efb963c75df1c7448
SHA512 d9772fb27cf5d96fddca34e20adabf98d13518e385a286f13933ec4f3281887d35fe590f668eb0022f3d0da1e9e4b3bff1e92163cf7519256c096d5bd0d795e6
SSDEEP 98304:emhd1UryeHr86yLvJbP/V7wQqZUha5jtSyZIUh:elQvJb32QbaZtliU
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Deletes itself 1 IoCs

pid	Process
3228	376B.tmp

Executes dropped EXE 1 IoCs

pid	Process
3228	376B.tmp

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3936 wrote to memory of 3228	3936	827f2ccdc2fca458fa61f43186333460_NeikiAnalytics.exe	85
PID 3936 wrote to memory of 3228	3936	827f2ccdc2fca458fa61f43186333460_NeikiAnalytics.exe	85
PID 3936 wrote to memory of 3228	3936	827f2ccdc2fca458fa61f43186333460_NeikiAnalytics.exe	85

C:\Users\Admin\AppData\Local\Temp\827f2ccdc2fca458fa61f43186333460_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\827f2ccdc2fca458fa61f43186333460_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3936
- C:\Users\Admin\AppData\Local\Temp\376B.tmp
  "C:\Users\Admin\AppData\Local\Temp\376B.tmp" --splashC:\Users\Admin\AppData\Local\Temp\827f2ccdc2fca458fa61f43186333460_NeikiAnalytics.exe 788D77C021F71BAA40425041F03B1E4092E30FF644EC306A378CDF3A0FEF9176EEE82822D5A40A2C76E8E377AE6A928F88CB05F808DC3555851B57F318144B35
  2⤵
  - Deletes itself
  - Executes dropped EXE
  PID:3228

376B.tmp

Path C:\Users\Admin\AppData\Local\Temp\376B.tmp
Size 5.4MB
SHA256 53ad66fec2902d341d7f8fa7355f0ed97c837557d6b9b3ae0dccb82973919259
MD5 d5051e8b609091ab37701556cb223f5b
SHA1 2859342a5fa2c7533e718a68fd0196512b7615b2
SHA512 975afe3d06950982cdb0a44bfb0b527389e7e35fc8f3f4c2358f006ee8ddf601e9331097fdb4cc22627c7c0c1ec713b06d2fcecde50ae11fb156ff75a49107ab
SSDEEP 98304:emhd1Urye1aVyX7mmenGV7wQqZUha5jtSyZIUh:elVa07mmX2QbaZtliU
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/3228-5-0x0000000000400000-0x0000000000849000-memory.dmp

Download

memory/3936-0-0x0000000000400000-0x0000000000849000-memory.dmp

Download