01b5a925111ff3f694758ddb4496d7458ee54e5c4c61724b8d10022a906b2257 | Triage

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
12-05-2024 17:13

Sharing

Report Analysis Logs

General

Target

33d6714ea4196b5a4ebfb49a8e3c6b50_NeikiAnalytics.exe
Size

14KB
MD5

33d6714ea4196b5a4ebfb49a8e3c6b50
SHA1

331c30cb34a7df37c9eae6e03d8b05b622008698
SHA256

01b5a925111ff3f694758ddb4496d7458ee54e5c4c61724b8d10022a906b2257
SHA512

671d82d0c64ea8621fbcc91f8c2a3d7658f832498a2ddc6fa52324fd6a3646636c22fd4d9c79b38b96d6b82235286eed823ecd2fe15563c2fe5be80182382cb6
SSDEEP

384:qWmCTTDy/eMKKKKKfssssaHoDFDE045H:E+AmssssGoDFA

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5060	1572	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\33d6714ea4196b5a4ebfb49a8e3c6b50_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\33d6714ea4196b5a4ebfb49a8e3c6b50_NeikiAnalytics.exe"
1⤵
PID:1572
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1572 -s 216
  2⤵
  - Program crash
  PID:5060

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1572 -ip 1572
1⤵
PID:1944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1572-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download