Overview

overview

3

Static

static

3

1d6f04526a...cs.exe

windows7-x64

1

1d6f04526a...cs.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    134s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/05/2024, 20:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1d6f04526a26461dac695be63864bf80_NeikiAnalytics.exe

  • Size

    14KB

  • MD5

    1d6f04526a26461dac695be63864bf80

  • SHA1

    aa9a10f1fa1fe073ee06778d5a186bedf35c94d9

  • SHA256

    b1c3d56d8b91c42b3bc473477924e7e33d28be8553a85d02300ff99100b72286

  • SHA512

    bacd7254a167097be6c6a3af8c9be209ae3972934be4e3880f097cd2192e4bc5c7f41180f0d7bb28e3e778c1292b603797927f3ad77e0cb261385eccc45421ff

  • SSDEEP

    192:mPsv/vSx8sv7tmkzTkzTkz6jSjy5EC7RqDE045HQ:qgvSO3k3k3kzW5EC74DE045H

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1d6f04526a26461dac695be63864bf80_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\1d6f04526a26461dac695be63864bf80_NeikiAnalytics.exe"
    1⤵
      PID:3496
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3496 -s 196
        2⤵
        • Program crash
        PID:2012
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3496 -ip 3496
      1⤵
        PID:3060

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3496-0-0x0000000000400000-0x000000000040A000-memory.dmp

        Filesize

        40KB

        Download