Analysis

  • max time kernel
    132s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-05-2024 13:52

General

  • Target

    bb1e6a959324b682cd7dc8428ffdb120_NeikiAnalytics.exe

  • Size

    1.3MB

  • MD5

    bb1e6a959324b682cd7dc8428ffdb120

  • SHA1

    fb8031a4ff72e2c6b96c4bb697642d4fcedd504a

  • SHA256

    6b18a44b4ced773071c02f6d387d1ce1658dd42001286c1bdb6604ebac537301

  • SHA512

    5735f5a8a5ce0d7294481ce7a6a920fd50e4c28f46847624fb47a970443949afefe8538683d6cb184a8e465facc045ab9c90d51a392a5e45c59f6b1f296bf0ea

  • SSDEEP

    24:eqGSQLHJGl8hBtbqCmXxoEp/KCDBVz+JuHG:bq+itKXCshB1+JuHG

Score
3/10

Malware Config

Signatures

  • Program crash 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bb1e6a959324b682cd7dc8428ffdb120_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\bb1e6a959324b682cd7dc8428ffdb120_NeikiAnalytics.exe"
    1⤵
      PID:1320
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1320 -s 216
        2⤵
        • Program crash
        PID:4456
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1320 -s 220
        2⤵
        • Program crash
        PID:2616
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1320 -ip 1320
      1⤵
        PID:2116
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 1320 -ip 1320
        1⤵
          PID:1064

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads