288d1e973710f689fb19541df0bc81b9ff624e186f01ea6889e589c1ae8db381

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01/07/2024, 00:52

Target

288d1e973710f689fb19541df0bc81b9ff624e186f01ea6889e589c1ae8db381_NeikiAnalytics.exe
Size

303KB
MD5

7168d210cb2691d76ce41c1c0443ec60
SHA1

0cf7bb224e3fa5ee6a2dc1b566d103c807407f78
SHA256

288d1e973710f689fb19541df0bc81b9ff624e186f01ea6889e589c1ae8db381
SHA512

9f45bfb61e76584eb12d0f88a146047fed8c8a8f4a33cfb31996a318bcdfd62e80c96471e37566edcbe3d5472f235f9d5612ebb6f5bdf9b2d9b3303c075ecd95
SSDEEP

6144:k/ZDMd6MauYbaj40e9U6otK3GU/M+NhsJxRqiV4M97v04UGgT6cC3dndbw3vtlH:qMcuPj40e9U6GK3xMAhOH4M104iT6cCy

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1752	2040	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 1752	2040	288d1e973710f689fb19541df0bc81b9ff624e186f01ea6889e589c1ae8db381_NeikiAnalytics.exe	28
PID 2040 wrote to memory of 1752	2040	288d1e973710f689fb19541df0bc81b9ff624e186f01ea6889e589c1ae8db381_NeikiAnalytics.exe	28
PID 2040 wrote to memory of 1752	2040	288d1e973710f689fb19541df0bc81b9ff624e186f01ea6889e589c1ae8db381_NeikiAnalytics.exe	28
PID 2040 wrote to memory of 1752	2040	288d1e973710f689fb19541df0bc81b9ff624e186f01ea6889e589c1ae8db381_NeikiAnalytics.exe	28

C:\Users\Admin\AppData\Local\Temp\288d1e973710f689fb19541df0bc81b9ff624e186f01ea6889e589c1ae8db381_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\288d1e973710f689fb19541df0bc81b9ff624e186f01ea6889e589c1ae8db381_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2040 -s 652
  2⤵
  - Program crash
  PID:1752

memory/2040-0-0x00000000740BE000-0x00000000740BF000-memory.dmp

Filesize
4KB

Download
memory/2040-1-0x0000000001100000-0x0000000001152000-memory.dmp

Filesize
328KB

Download
memory/2040-2-0x00000000740B0000-0x000000007479E000-memory.dmp

Filesize
6.9MB

Download
memory/2040-3-0x00000000740BE000-0x00000000740BF000-memory.dmp

Filesize
4KB

Download
memory/2040-4-0x00000000740B0000-0x000000007479E000-memory.dmp

Filesize
6.9MB

Download