Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 13:39

General

  • Target

    4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe

  • Size

    819KB

  • MD5

    4a93260f786ff3f712683472cb06f950

  • SHA1

    caba18d9496290b2aae07d5ac07850f25e837bac

  • SHA256

    6a0703968bd19b23e121e38e00d343985613892d45c87f92f3ad0180c70f595e

  • SHA512

    e4dbabb9666dfb48f7341be277fcc0a9bbf38b5d9217c8ca8fa89f53d8c91a35ec3c624069bc9e3a50fc0c7559e528da6625b2d5662b44393ef6e176c19eb4d1

  • SSDEEP

    12288:ZZ2cVZ/VvU1AFEuk3z3pGyeiQf/6p6dPRNohv:72cVpVvUOubjpGyRQf4IPDov

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2148
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 656
      2⤵
      • Program crash
      PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2148-0-0x00000000748BE000-0x00000000748BF000-memory.dmp

    Filesize

    4KB

  • memory/2148-1-0x0000000001010000-0x00000000010E2000-memory.dmp

    Filesize

    840KB

  • memory/2148-2-0x00000000748B0000-0x0000000074F9E000-memory.dmp

    Filesize

    6.9MB

  • memory/2148-3-0x00000000748BE000-0x00000000748BF000-memory.dmp

    Filesize

    4KB

  • memory/2148-4-0x00000000748B0000-0x0000000074F9E000-memory.dmp

    Filesize

    6.9MB