325d5dfb44b1de74c80f1f7e80259aa30de8b40c3a9a31404bbf48f478a8d363

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01/07/2024, 03:32

Target

325d5dfb44b1de74c80f1f7e80259aa30de8b40c3a9a31404bbf48f478a8d363_NeikiAnalytics.dll
Size

6KB
MD5

62d3533c537e88488e790c458a0518e0
SHA1

7ec65b486b7fa82e77c44463bb0e2265eee8016d
SHA256

325d5dfb44b1de74c80f1f7e80259aa30de8b40c3a9a31404bbf48f478a8d363
SHA512

76716ac743c3b3c20aadf94f871a134b2df0d76805878ccba38b1749690232c57ac1d785fbc0d5527f0ff28efe4cb0679998cf6b7aba2041ee955c66ddb28c2a
SSDEEP

48:63mll5YVOa9VUX1iwbQWu0UB+BDq9J5SH:VDa9VUX9bQW0B+FqX5SH

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2348 wrote to memory of 2396	2348	rundll32.exe	28
PID 2348 wrote to memory of 2396	2348	rundll32.exe	28
PID 2348 wrote to memory of 2396	2348	rundll32.exe	28
PID 2348 wrote to memory of 2396	2348	rundll32.exe	28
PID 2348 wrote to memory of 2396	2348	rundll32.exe	28
PID 2348 wrote to memory of 2396	2348	rundll32.exe	28
PID 2348 wrote to memory of 2396	2348	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\325d5dfb44b1de74c80f1f7e80259aa30de8b40c3a9a31404bbf48f478a8d363_NeikiAnalytics.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2348
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\325d5dfb44b1de74c80f1f7e80259aa30de8b40c3a9a31404bbf48f478a8d363_NeikiAnalytics.dll,#1
  2⤵
  PID:2396