Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/05/2024, 11:34

General

  • Target

    b5563d9ab486a0bae7f4a756e4bc2ab0_NeikiAnalytics.exe

  • Size

    524KB

  • MD5

    b5563d9ab486a0bae7f4a756e4bc2ab0

  • SHA1

    98e26a7658097c43a78fc0c7ef59b563274c9545

  • SHA256

    af930299abdcf46ed22100be5eb937d3d1a8167e02f3873919552d0e8c47c63c

  • SHA512

    3e3134e34b1545ba512c9b69516b64b503bebd9fab70303ca93b7b98d139a77b7dda18694d71f9039d4cc7e0422b950c5c59336f994a86a659123e69db2a01fa

  • SSDEEP

    3072:xrUXlENGaiFo0dQ5BbO2zMUIA6I4ANBScXkOpF49DNQCp3BPRTECp3BPRbImrP7u:x4XlfWlxCwkOw8CfpoCfpsmLc

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b5563d9ab486a0bae7f4a756e4bc2ab0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\b5563d9ab486a0bae7f4a756e4bc2ab0_NeikiAnalytics.exe"
    1⤵
      PID:4284
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4284 -s 1036
        2⤵
        • Program crash
        PID:2280
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4284 -ip 4284
      1⤵
        PID:1840

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4284-0-0x0000000074BFE000-0x0000000074BFF000-memory.dmp

        Filesize

        4KB

      • memory/4284-1-0x00000000001D0000-0x0000000000256000-memory.dmp

        Filesize

        536KB

      • memory/4284-2-0x0000000004B10000-0x0000000004E64000-memory.dmp

        Filesize

        3.3MB

      • memory/4284-3-0x0000000005510000-0x0000000005AB4000-memory.dmp

        Filesize

        5.6MB

      • memory/4284-4-0x0000000005000000-0x0000000005092000-memory.dmp

        Filesize

        584KB

      • memory/4284-5-0x0000000074BF0000-0x00000000753A0000-memory.dmp

        Filesize

        7.7MB

      • memory/4284-6-0x0000000074BF0000-0x00000000753A0000-memory.dmp

        Filesize

        7.7MB