Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/05/2024, 22:11

General

  • Target

    344008d6ba91e9e0489f216988a028a0_NeikiAnalytics.exe

  • Size

    14KB

  • MD5

    344008d6ba91e9e0489f216988a028a0

  • SHA1

    27072f18a23bfb8db05da95eb33efc9cb0b3735e

  • SHA256

    415400f7fae728ef1ce9715df4b80bd74e379e81fe774064197bdca4bd85d4fe

  • SHA512

    da676b77f98c6213a537d30621075857e08001c955363ff98f16718e09db2ae1e8f3927a858ea1d78d905b657f2dfdf483f9594373e631f2e7a8be25cd5a935e

  • SSDEEP

    192:do1+x0/bH+VqKfrpW+TQrCpze7d8Tozo69JxtoROxURbZi0bbOuBy4JLe9upqDE8:huuFrpW+p+q8zjxmHbgstBvJKDE045H

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\344008d6ba91e9e0489f216988a028a0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\344008d6ba91e9e0489f216988a028a0_NeikiAnalytics.exe"
    1⤵
      PID:996
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 996 -s 216
        2⤵
        • Program crash
        PID:3632
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 996 -ip 996
      1⤵
        PID:2316

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/996-0-0x0000000000400000-0x000000000040A000-memory.dmp

        Filesize

        40KB