Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-05-2024 20:56

General

  • Target

    0e0c8e00a035f978ca06a1f10a78bbe0_NeikiAnalytics.exe

  • Size

    108KB

  • MD5

    0e0c8e00a035f978ca06a1f10a78bbe0

  • SHA1

    813428b6a5e58119f988b664abbb420e5d9f2075

  • SHA256

    a898bb40347e3da5a352a903564c1dfbeac043bc76f45a9ee16c15adac2b6bc5

  • SHA512

    a889b3c38a3deeaf7992280e3ca016bed4fd7849be26ab72c47ffa4fae36a3c80ccf648e76381794d1e5caa450824ac25ac50e4620fdc13d3b206591f8a4a4d2

  • SSDEEP

    3072:Q6oVTCrS73IVf2wq96SAGspCAqHKwMck:QserIVftA6xGOCAsDM

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0e0c8e00a035f978ca06a1f10a78bbe0_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\0e0c8e00a035f978ca06a1f10a78bbe0_NeikiAnalytics.exe"
    1⤵
      PID:4876
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 808
        2⤵
        • Program crash
        PID:1992
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4876 -ip 4876
      1⤵
        PID:1728

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/4876-0-0x0000000074CDE000-0x0000000074CDF000-memory.dmp

        Filesize

        4KB

      • memory/4876-1-0x0000000000950000-0x0000000000972000-memory.dmp

        Filesize

        136KB

      • memory/4876-2-0x00000000058D0000-0x0000000005E74000-memory.dmp

        Filesize

        5.6MB

      • memory/4876-3-0x0000000005320000-0x00000000053B2000-memory.dmp

        Filesize

        584KB