Analysis

  • max time kernel
    92s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-05-2024 08:30

General

  • Target

    22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe

  • Size

    174KB

  • MD5

    61461190b41be75243e4fd1286eb37c0

  • SHA1

    be3000985977759bb13b1b986e4e92892fb876fe

  • SHA256

    22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578

  • SHA512

    35c5352804209f062b0b09a9f499f3e47ca90d0be6ad59cbf44a72ae6b4e5379eec6f26eb6da9d0fc1a6431129af29cbad9a8b799bb6b302e882759945f3645e

  • SSDEEP

    3072:K5lLh9N9tQZ6evvk7LZpEf67qAmsmRAdW:KN9rCr8xuAmsT

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\22697b5caeaddfc7b25e708ea2fc27393614d49b9de9909919f1fc13ee9aa578_NeikiAnalytics.exe"
    1⤵
      PID:3300
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 3300 -s 836
        2⤵
        • Program crash
        PID:2012
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3300 -ip 3300
      1⤵
        PID:3020

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3300-0-0x000000007509E000-0x000000007509F000-memory.dmp

        Filesize

        4KB

      • memory/3300-1-0x00000000006E0000-0x0000000000710000-memory.dmp

        Filesize

        192KB

      • memory/3300-2-0x0000000005620000-0x0000000005BC4000-memory.dmp

        Filesize

        5.6MB

      • memory/3300-3-0x0000000004FA0000-0x0000000005032000-memory.dmp

        Filesize

        584KB