44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01/07/2024, 08:43

Target

44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe
Size

4.6MB
MD5

c3b39653ada371713dcedd26faf41b00
SHA1

421aa0265835faccba33dc1c6a254bb76e689fc3
SHA256

44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef
SHA512

89cd069f77e84b4b610970a9312cf69594e49dd578c6bcab0ac1bf47974ad8ae07e8fa9eb724b9f91b35a0c4ab44ebb9d80c1759b20fffb5f62965388677e3ba
SSDEEP

24576:HScwwba/ZS2JovBYzJLVxZITvKMMMvQAM2BYRcBoA1/LhAggkesqOBGhefUjZY+o:HFwWgnLqrXgiYAqxeHg4LqrXgtQe

Score

7^/10

Deletes itself 1 IoCs

pid	Process
2608	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe

Executes dropped EXE 1 IoCs

pid	Process
2608	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe

Loads dropped DLL 4 IoCs

pid	Process
3016	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe
3032	WerFault.exe
3032	WerFault.exe
3032	WerFault.exe

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3032	2608	WerFault.exe	29

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
3016	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2608	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 3016 wrote to memory of 2608	3016	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe	29
PID 3016 wrote to memory of 2608	3016	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe	29
PID 3016 wrote to memory of 2608	3016	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe	29
PID 3016 wrote to memory of 2608	3016	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe	29
PID 2608 wrote to memory of 3032	2608	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe	30
PID 2608 wrote to memory of 3032	2608	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe	30
PID 2608 wrote to memory of 3032	2608	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe	30
PID 2608 wrote to memory of 3032	2608	44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe	30

\Users\Admin\AppData\Local\Temp\44379bcc7134e93b731114f4aee0146df1077518f19ca2f4ddbc9621cc4071ef_NeikiAnalytics.exe

Filesize
4.6MB

MD5
95584273840efeb81c7d41614b501b46

SHA1
214885ad669af758bd729c7ff3bd2f8981700c0e

SHA256
ebf45354b08a15db4cc154195178fa0f590661641bc964132c0042bb4bafbc6c

SHA512
7c48ad7be608707369d6e8849cb748b7eb3c5d86e84b206e3b72379fbf57b2c5daac6a0c42eb7f0748d2c21636fd666eaa8e888192990cde36a4c9e77c3238af

Download Submit
memory/2608-10-0x0000000000400000-0x00000000004EE000-memory.dmp

Filesize
952KB

Download
memory/2608-11-0x0000000002F50000-0x000000000303E000-memory.dmp

Filesize
952KB

Download
memory/3016-0-0x0000000000400000-0x00000000004EE000-memory.dmp

Filesize
952KB

Download
memory/3016-6-0x0000000002D30000-0x0000000002E1E000-memory.dmp

Filesize
952KB

Download
memory/3016-8-0x0000000000400000-0x00000000004EE000-memory.dmp

Filesize
952KB

Download