9a2f32911edcbb8612fd55c27381c07b0da2b1d630ee41dbb4a39f6045cb9ce2

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
19/06/2024, 14:47

Target

c54394b747b71d096e0bedbcea7181c0_NeikiAnalytics.dll
Size

39KB
MD5

c54394b747b71d096e0bedbcea7181c0
SHA1

da1cc1a2bc6da1b310c272f72b2d6110b7dcda1e
SHA256

9a2f32911edcbb8612fd55c27381c07b0da2b1d630ee41dbb4a39f6045cb9ce2
SHA512

6d2c0314c4d8ec2ac8e70f503b03702c1c9f24572f16d8940b5b740e66497c8d799aad1c35dc71ab59a88c0a70d8d349a45867985ea43c14529b54375f4c1b22
SSDEEP

384:PdDtmzTL6pfbk2KpvZOrjihdK4K1K1Ed7C4+K8V33c4E5NjYcSl1p1F1iO4s5NTC:PyTOzkLQrjihnEAftGvSCI

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 1284	2240	rundll32.exe	28
PID 2240 wrote to memory of 1284	2240	rundll32.exe	28
PID 2240 wrote to memory of 1284	2240	rundll32.exe	28
PID 2240 wrote to memory of 1284	2240	rundll32.exe	28
PID 2240 wrote to memory of 1284	2240	rundll32.exe	28
PID 2240 wrote to memory of 1284	2240	rundll32.exe	28
PID 2240 wrote to memory of 1284	2240	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\c54394b747b71d096e0bedbcea7181c0_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\c54394b747b71d096e0bedbcea7181c0_NeikiAnalytics.dll,#1
  2⤵
  PID:1284