12bfbc21fe77ec695932ddf9379cc8a490d6a1aae7f110d779a9ae3b0261b38c

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
30/06/2024, 00:26

Target

12bfbc21fe77ec695932ddf9379cc8a490d6a1aae7f110d779a9ae3b0261b38c_NeikiAnalytics.dll
Size

77KB
MD5

650604c2050320c41b3623dffde4f6b0
SHA1

ee139d13a7fd64eeb2181b15cdaa2e587de8f05e
SHA256

12bfbc21fe77ec695932ddf9379cc8a490d6a1aae7f110d779a9ae3b0261b38c
SHA512

61276f090560c4de3b30d89e44fe198b57bc7dc9b3be406e927d9954e4dc56da57c4f26c5cc32302c21d4e0fe7dfdac332a8f1defd02f1db7e74c2c6405be6f9
SSDEEP

768:Xos+cs+gsCkjuPia8CfnvceB4ib39XoHwURJMRNifUoTkGnQZsfNDwC3ywSYh+lo:XoEVfqWib36O6Hjpw8zXxfpom

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2016	316	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2232 wrote to memory of 316	2232	rundll32.exe	28
PID 2232 wrote to memory of 316	2232	rundll32.exe	28
PID 2232 wrote to memory of 316	2232	rundll32.exe	28
PID 2232 wrote to memory of 316	2232	rundll32.exe	28
PID 2232 wrote to memory of 316	2232	rundll32.exe	28
PID 2232 wrote to memory of 316	2232	rundll32.exe	28
PID 2232 wrote to memory of 316	2232	rundll32.exe	28
PID 316 wrote to memory of 2016	316	rundll32.exe	29
PID 316 wrote to memory of 2016	316	rundll32.exe	29
PID 316 wrote to memory of 2016	316	rundll32.exe	29
PID 316 wrote to memory of 2016	316	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\12bfbc21fe77ec695932ddf9379cc8a490d6a1aae7f110d779a9ae3b0261b38c_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2232
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\12bfbc21fe77ec695932ddf9379cc8a490d6a1aae7f110d779a9ae3b0261b38c_NeikiAnalytics.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:316
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 316 -s 220
    3⤵
    - Program crash
    PID:2016