Analysis

  • max time kernel
    92s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-05-2024 04:52

General

  • Target

    f918bbfdd34c152a09df0e39f26f9020_NEIKI.exe

  • Size

    252KB

  • MD5

    f918bbfdd34c152a09df0e39f26f9020

  • SHA1

    43c2300e78d581d1511dd2f2d5e3a9e4dbbf20ad

  • SHA256

    43a22c5d57117268e00a822dfd2e9c05fdef3fb24e091f1069fd5e2795645522

  • SHA512

    499eff6955741da6ba0b26b44d5dbb70b7a50cb01d57e5ae26281f40ac9abe84a531e3397994ddbea8849cda4abcdbb394b93e03e32262112829cd215e19e651

  • SSDEEP

    1536:1UDRi9T5sJdi9bxHNr2pnx6KaUuP6iuwJRFwOWEXiHZTAHjiwg58:18RinudiP52xx67lLdhViHZ0DY58

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f918bbfdd34c152a09df0e39f26f9020_NEIKI.exe
    "C:\Users\Admin\AppData\Local\Temp\f918bbfdd34c152a09df0e39f26f9020_NEIKI.exe"
    1⤵
      PID:636
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 636 -s 220
        2⤵
        • Program crash
        PID:436
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 636 -s 224
        2⤵
        • Program crash
        PID:3308
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 636 -ip 636
      1⤵
        PID:4344
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 636 -ip 636
        1⤵
          PID:1424

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/636-0-0x0000000000400000-0x000000000043F000-memory.dmp

          Filesize

          252KB