Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
09/05/2024, 13:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe
-
Size
819KB
-
MD5
4a93260f786ff3f712683472cb06f950
-
SHA1
caba18d9496290b2aae07d5ac07850f25e837bac
-
SHA256
6a0703968bd19b23e121e38e00d343985613892d45c87f92f3ad0180c70f595e
-
SHA512
e4dbabb9666dfb48f7341be277fcc0a9bbf38b5d9217c8ca8fa89f53d8c91a35ec3c624069bc9e3a50fc0c7559e528da6625b2d5662b44393ef6e176c19eb4d1
-
SSDEEP
12288:ZZ2cVZ/VvU1AFEuk3z3pGyeiQf/6p6dPRNohv:72cVpVvUOubjpGyRQf4IPDov
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2224 2148 WerFault.exe 27 -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2148 wrote to memory of 2224 2148 4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe 28 PID 2148 wrote to memory of 2224 2148 4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe 28 PID 2148 wrote to memory of 2224 2148 4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe 28 PID 2148 wrote to memory of 2224 2148 4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\4a93260f786ff3f712683472cb06f950_NeikiAnalytics.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2148 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 6562⤵
- Program crash
PID:2224
-