Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
17/05/2024, 04:54
Static task
static1
Behavioral task
behavioral1
Sample
ac8768dcec4980c47c43f44d1feab8a0_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ac8768dcec4980c47c43f44d1feab8a0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
ac8768dcec4980c47c43f44d1feab8a0_NeikiAnalytics.exe
-
Size
14KB
-
MD5
ac8768dcec4980c47c43f44d1feab8a0
-
SHA1
2a2478416ab0402a264e3b9ea5a6c2aaffee4b53
-
SHA256
34710a43d0c6c8188f351e091be338bd38ea7167abdcb5640a273178f1f99b7a
-
SHA512
3480f935db27fefb8da848cbf01a50d1184e08d675d0c07d41816dd06a05d81ffe9cc6121c3e1961b6b379f32bb7e0562f528ec06e9f2033cfa28bc0dc6e5831
-
SSDEEP
192:GHBUumiDBowdskpG/Pb3OlOlOqzgzgzgzgzgzgzgzgzgzgzVaCVzpUqAqDE045HQ:GHBUumYBowPY/D3OlOlOsVUqvDE045H
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2760 4908 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\ac8768dcec4980c47c43f44d1feab8a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\ac8768dcec4980c47c43f44d1feab8a0_NeikiAnalytics.exe"1⤵PID:4908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4908 -s 2162⤵
- Program crash
PID:2760
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4908 -ip 49081⤵PID:4500