486e30f154b2cef0f740b1f6cdbb0edd93498f0c5187123140e3eab5f63a1adc

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29/06/2024, 01:48

Target

486e30f154b2cef0f740b1f6cdbb0edd93498f0c5187123140e3eab5f63a1adc_NeikiAnalytics.dll
Size

1.1MB
MD5

2269e7666bb5adcaa09803f9fdc91380
SHA1

aaed0f938d383293ead933559d69afa28adbc454
SHA256

486e30f154b2cef0f740b1f6cdbb0edd93498f0c5187123140e3eab5f63a1adc
SHA512

4bb0521f3e92c02d689cc362fe38d3c3b43d46930d0c514cc5fb380007a368037e7247dcf4f0b8963985e09b4a90c49841fd20e794939c17d1b5d38607a65453
SSDEEP

24576:RnR1ougwQFJCJECt9yRhYycwVCBFE6Kenrc3l9IH0rEH7w:z3loJCWCLyRNcLEPenrc3l9Ik

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28
PID 2240 wrote to memory of 2288	2240	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\486e30f154b2cef0f740b1f6cdbb0edd93498f0c5187123140e3eab5f63a1adc_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\486e30f154b2cef0f740b1f6cdbb0edd93498f0c5187123140e3eab5f63a1adc_NeikiAnalytics.dll,#1
  2⤵
  PID:2288