7306be361d395154078a835f9f3ebab57eabf55f22d75ad04bef7b9023b79707

Analysis

max time kernel
92s
max time network
93s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 20:40

Target

853fe1634aa8c7916ed3f342570fe920_NeikiAnalytics.dll
Size

38KB
MD5

853fe1634aa8c7916ed3f342570fe920
SHA1

d81ca4746d867cad088608036f4801f21da5790d
SHA256

7306be361d395154078a835f9f3ebab57eabf55f22d75ad04bef7b9023b79707
SHA512

11bd48086b5765b102366bbc8a54b94dd81861a5471e9e55d5fcf1ffae5b80787538510505604ab1139c41c80215e0b9e4a3554a268fc8460de6f34efe01ce28
SSDEEP

768:K8cgLOciLFe+hQUkBlXdMD5lSPytDs53LS4:wgLO3gOQfJMWlLV

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4712 wrote to memory of 2668	4712	rundll32.exe	82
PID 4712 wrote to memory of 2668	4712	rundll32.exe	82
PID 4712 wrote to memory of 2668	4712	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\853fe1634aa8c7916ed3f342570fe920_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4712
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\853fe1634aa8c7916ed3f342570fe920_NeikiAnalytics.dll,#1
  2⤵
  PID:2668