Analysis
-
max time kernel
140s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
08-05-2024 22:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7dc53d1a99cf9955d80ebc7a098f2320_NEIKI.exe
Resource
win7-20240419-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7dc53d1a99cf9955d80ebc7a098f2320_NEIKI.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
7dc53d1a99cf9955d80ebc7a098f2320_NEIKI.exe
-
Size
268KB
-
MD5
7dc53d1a99cf9955d80ebc7a098f2320
-
SHA1
68e7b7132f23a5ddccdf03b14454a2ab52a0a52a
-
SHA256
4abc00f67ad341419289f191f402fc041951fcb6386382e5df8774a4c6a4ba4f
-
SHA512
0eb31aa53a3abd38e9377b45ef6076838c1788c6d271c134401e8e0deb442981d14ecb3921159a08f4b5b1bc1cc84bb4274e7eea775793226609a686fc8d79a2
-
SSDEEP
3072:D8RinudiP52xx67lLdhvDiHmsreFKPD375lHzpa1P:gkgiPA6R7xOeYr75lHzpaF
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2548 2776 WerFault.exe 81 2888 2776 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\7dc53d1a99cf9955d80ebc7a098f2320_NEIKI.exe"C:\Users\Admin\AppData\Local\Temp\7dc53d1a99cf9955d80ebc7a098f2320_NEIKI.exe"1⤵PID:2776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2776 -s 2202⤵
- Program crash
PID:2548
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2776 -s 2242⤵
- Program crash
PID:2888
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2776 -ip 27761⤵PID:3728
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 2776 -ip 27761⤵PID:1480