Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
16-05-2024 22:29
Behavioral task
behavioral1
Sample
49a7db3c5c3b3a331fbf54317673e9e0_NeikiAnalytics.exe
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
49a7db3c5c3b3a331fbf54317673e9e0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
49a7db3c5c3b3a331fbf54317673e9e0_NeikiAnalytics.exe
-
Size
71KB
-
MD5
49a7db3c5c3b3a331fbf54317673e9e0
-
SHA1
953bdedf2ae0c93b1f96c781f3f9a156cc0ded6d
-
SHA256
df53c09972ae1940583b81791bc5779ce4372b412dd7463fce4da59cf135c13a
-
SHA512
cb5f99daf2157f3b534948e9c3805ac397bfe1b0a0a4fa4acdb209715144a1eea4c2ffea36abec3c82217720ea029ff3915898be41ebc919c1d443ef1c52475a
-
SSDEEP
1536:tFgts29NCqn93r5aAsF6PrG+V2jNDaSdpIZUc:iNCqnl5aA46P6KGaIpIu
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1772 5060 WerFault.exe 49a7db3c5c3b3a331fbf54317673e9e0_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\49a7db3c5c3b3a331fbf54317673e9e0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\49a7db3c5c3b3a331fbf54317673e9e0_NeikiAnalytics.exe"1⤵PID:5060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 4922⤵
- Program crash
PID:1772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5060 -ip 50601⤵PID:1684