27050474e7add110f3753f4c2eac65f3c59f9b7d9a77ecb0eaddde3ef915aa35

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
28-06-2024 22:27

Target

27050474e7add110f3753f4c2eac65f3c59f9b7d9a77ecb0eaddde3ef915aa35_NeikiAnalytics.dll
Size

131KB
MD5

78d68d970faf7874251c3340aa147bb0
SHA1

b33271f263ed2a709e24b1a636875d21655de717
SHA256

27050474e7add110f3753f4c2eac65f3c59f9b7d9a77ecb0eaddde3ef915aa35
SHA512

5d2e4c93342bc05664e6f4c6c04d7c1ee7cf84cc6740f853e7fbc7259119c8846b9cf0d593891bd8e95068c8acd9ab8ef8f9da745bddef1808bd6a592033be81
SSDEEP

3072:s3P/oLJOZdZNmdB2gB0YQbfEVHQUglPJSzJoyppZX:s//2MrZ0L2gO4V7VFpZX

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2960	2948	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2388 wrote to memory of 2948	2388	rundll32.exe	28
PID 2948 wrote to memory of 2960	2948	rundll32.exe	29
PID 2948 wrote to memory of 2960	2948	rundll32.exe	29
PID 2948 wrote to memory of 2960	2948	rundll32.exe	29
PID 2948 wrote to memory of 2960	2948	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\27050474e7add110f3753f4c2eac65f3c59f9b7d9a77ecb0eaddde3ef915aa35_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2388
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\27050474e7add110f3753f4c2eac65f3c59f9b7d9a77ecb0eaddde3ef915aa35_NeikiAnalytics.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2948
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2948 -s 220
    3⤵
    - Program crash
    PID:2960