9b51d236ef39424f9c8eea3c609fbf0ed90d1d4c8b299b738747419e29b48934

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28-06-2024 14:02

Target

9b51d236ef39424f9c8eea3c609fbf0ed90d1d4c8b299b738747419e29b48934_NeikiAnalytics.exe
Size

341KB
MD5

fc03fe3f90cd874fc3234a3ab4857fc0
SHA1

2faaaa203143c041c9122fa663b92c3bcf3eb1fe
SHA256

9b51d236ef39424f9c8eea3c609fbf0ed90d1d4c8b299b738747419e29b48934
SHA512

e441e699d720ac87029861a9f911421b2f05a33602e001cc1c4a2a12ba68fc2d16c227967d148cf9891e2dc27542291b061e2d88a9467d81a6c4e07ad2bd0eba
SSDEEP

6144:lRqh89zbCWwtOVtWwyidmTJiCAOI8jn48uXskDX1LGhyU7DFyVi:qsbCWwBn9MskDXAYkDCi

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2140	2364	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2364 wrote to memory of 2140	2364	9b51d236ef39424f9c8eea3c609fbf0ed90d1d4c8b299b738747419e29b48934_NeikiAnalytics.exe	28
PID 2364 wrote to memory of 2140	2364	9b51d236ef39424f9c8eea3c609fbf0ed90d1d4c8b299b738747419e29b48934_NeikiAnalytics.exe	28
PID 2364 wrote to memory of 2140	2364	9b51d236ef39424f9c8eea3c609fbf0ed90d1d4c8b299b738747419e29b48934_NeikiAnalytics.exe	28
PID 2364 wrote to memory of 2140	2364	9b51d236ef39424f9c8eea3c609fbf0ed90d1d4c8b299b738747419e29b48934_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\9b51d236ef39424f9c8eea3c609fbf0ed90d1d4c8b299b738747419e29b48934_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\9b51d236ef39424f9c8eea3c609fbf0ed90d1d4c8b299b738747419e29b48934_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2364
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2364 -s 532
  2⤵
  - Program crash
  PID:2140

memory/2364-0-0x0000000074A0E000-0x0000000074A0F000-memory.dmp

Filesize
4KB

Download
memory/2364-1-0x0000000000B70000-0x0000000000BC8000-memory.dmp

Filesize
352KB

Download