160e45e3172b2dc5332e4a0d91e03aefec4ffdade8f5c447a91dc9e8da319f4e | Triage

Analysis

max time kernel
135s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
20-05-2024 10:56

Sharing

Report Analysis Logs

General

Target

ee125ae9209bc0a4fc900b42e0cc7bc0_NeikiAnalytics.exe
Size

14KB
MD5

ee125ae9209bc0a4fc900b42e0cc7bc0
SHA1

7d9cc74bde08ac8127f303966db8b40668900e61
SHA256

160e45e3172b2dc5332e4a0d91e03aefec4ffdade8f5c447a91dc9e8da319f4e
SHA512

b2a621bf7ee881cec5185bf519b0464118bab31c05689e1b8a0e6ce049eb22f20a26fffc9fab1dfe22c47fbf2b9cb68269120a1975636e0cae43cad47f31244a
SSDEEP

384:17J0PGC3w0KUtPvIZvoogGDE045HHKKK:J+GKgUtnIZr5A

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3076	340	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\ee125ae9209bc0a4fc900b42e0cc7bc0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\ee125ae9209bc0a4fc900b42e0cc7bc0_NeikiAnalytics.exe"
1⤵
PID:340
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 340 -s 216
  2⤵
  - Program crash
  PID:3076

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 340 -ip 340
1⤵
PID:3116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/340-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download