3c4fc40650481d00b92a10c21a7181e8be2f42b6ea4423cd3c30a2473221ee39

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 06:32

Target

3c4fc40650481d00b92a10c21a7181e8be2f42b6ea4423cd3c30a2473221ee39_NeikiAnalytics.exe
Size

21KB
MD5

44b032b5ab105979c8f677af471f61f0
SHA1

41bbf5e4a367ee39981904ef71b4110350054a7b
SHA256

3c4fc40650481d00b92a10c21a7181e8be2f42b6ea4423cd3c30a2473221ee39
SHA512

08fcd2930b251890ef4dce72ed64c2a0ac92d326266f45432cbb7992a10cb271a49c075d77b7761d314f354c4f0b7f01469924d1d25296bf08b366b35c3b7a89
SSDEEP

384:FtfVCTuVAMS31kxkGiAUKUH9WUQGXQlmi0H3FhW91:HVCmw31kT7UddIGXQlmioq

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3048	2316	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 3048	2316	3c4fc40650481d00b92a10c21a7181e8be2f42b6ea4423cd3c30a2473221ee39_NeikiAnalytics.exe	29
PID 2316 wrote to memory of 3048	2316	3c4fc40650481d00b92a10c21a7181e8be2f42b6ea4423cd3c30a2473221ee39_NeikiAnalytics.exe	29
PID 2316 wrote to memory of 3048	2316	3c4fc40650481d00b92a10c21a7181e8be2f42b6ea4423cd3c30a2473221ee39_NeikiAnalytics.exe	29
PID 2316 wrote to memory of 3048	2316	3c4fc40650481d00b92a10c21a7181e8be2f42b6ea4423cd3c30a2473221ee39_NeikiAnalytics.exe	29

C:\Users\Admin\AppData\Local\Temp\3c4fc40650481d00b92a10c21a7181e8be2f42b6ea4423cd3c30a2473221ee39_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3c4fc40650481d00b92a10c21a7181e8be2f42b6ea4423cd3c30a2473221ee39_NeikiAnalytics.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2316 -s 608
  2⤵
  - Program crash
  PID:3048

memory/2316-0-0x0000000074AAE000-0x0000000074AAF000-memory.dmp

Filesize
4KB

Download
memory/2316-1-0x00000000009F0000-0x00000000009FC000-memory.dmp

Filesize
48KB

Download
memory/2316-2-0x0000000074AA0000-0x000000007518E000-memory.dmp

Filesize
6.9MB

Download
memory/2316-3-0x0000000074AAE000-0x0000000074AAF000-memory.dmp

Filesize
4KB

Download
memory/2316-4-0x0000000074AA0000-0x000000007518E000-memory.dmp

Filesize
6.9MB

Download