5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 00:44

Target

5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe
Size

184KB
MD5

648958ca940b7384fc86a751323d3190
SHA1

3e5bdec77c9b74f39d6b9949f460422c0bb15676
SHA256

5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a
SHA512

43b6d81baf01060ed5e43ff0bc89572aadd43a39e97d7c6fc0f1bb2aa7efa5f33ff9acb662429a317a414a609415a663501c7ab26936f03a009cb05a2a2fa48c
SSDEEP

3072:Uxb70bovWOKsu47Z3e5n50XX1lvnqnxiuc:UxMouz47M52X1lPqnxiu

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1740	2384	WerFault.exe	27

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2384	5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2384 wrote to memory of 1740	2384	5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe	28
PID 2384 wrote to memory of 1740	2384	5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe	28
PID 2384 wrote to memory of 1740	2384	5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe	28
PID 2384 wrote to memory of 1740	2384	5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2384
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2384 -s 188
  2⤵
  - Program crash
  PID:1740