3c1ab30ce039999e08f64cb53386bf8afe186b78850af9497ac2757e3f6cac8c | Triage

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09/05/2024, 01:47

Sharing

Report Analysis Logs

General

Target

c404212c19ebab550c741d2d53f0d810_NEIKI.exe
Size

32KB
MD5

c404212c19ebab550c741d2d53f0d810
SHA1

843762ab045b4f29bb8f48e19a33cfa7661e3208
SHA256

3c1ab30ce039999e08f64cb53386bf8afe186b78850af9497ac2757e3f6cac8c
SHA512

0da36cd4e1594c1613cbafe295c2ad09018fe4e559df8a5a47edb2ecc9769e3b1337c0da1665fb37f0c38b028737b5988bfc6a0124e86d03472df0696669cf09
SSDEEP

768:n60kmItpSVtOYCR7CXmOkD+yPkmhUNF6ex:n607QpS+YmmOFP7hUNw

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2304-0-0x0000000000400000-0x0000000000408000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1820	2304	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\c404212c19ebab550c741d2d53f0d810_NEIKI.exe
"C:\Users\Admin\AppData\Local\Temp\c404212c19ebab550c741d2d53f0d810_NEIKI.exe"
1⤵
PID:2304
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2304 -s 216
  2⤵
  - Program crash
  PID:1820

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2304 -ip 2304
1⤵
PID:4552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2304-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download