ace77ca926fe334ee44c5a095721e386735c7f182bb2aa4d75455c61979dcddd

Analysis

max time kernel
134s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
29/06/2024, 13:12

Target

ace77ca926fe334ee44c5a095721e386735c7f182bb2aa4d75455c61979dcddd_NeikiAnalytics.dll
Size

268KB
MD5

10a446387c0a75bc8fee09fb4b220820
SHA1

dc9f60cb5a5cac83e623e9e2eb20ed16323a263e
SHA256

ace77ca926fe334ee44c5a095721e386735c7f182bb2aa4d75455c61979dcddd
SHA512

2dcf4fd7db1d0895c31dcee11d68d61c505317553caefc0ae6466aac2a0a3cdce4d049a02f5777f93cfea49fa91d5b06630ce19448fa60704ca5f7ec59d05035
SSDEEP

6144:lItLmjb4HjM/JsAxd9dDJfzLsHBfvzBYbF6e2H1moeNBzYiyR6K:lItLmjEHjM/Jjxd9dDJfzLU7QoeDsi

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 1964	2448	rundll32.exe	83
PID 2448 wrote to memory of 1964	2448	rundll32.exe	83
PID 2448 wrote to memory of 1964	2448	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ace77ca926fe334ee44c5a095721e386735c7f182bb2aa4d75455c61979dcddd_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ace77ca926fe334ee44c5a095721e386735c7f182bb2aa4d75455c61979dcddd_NeikiAnalytics.dll,#1
  2⤵
  PID:1964