d28b435c89e391eb9449fa4c6578022e1380fb8c1f1a62c373c0166d251c18fd | Triage

Analysis

max time kernel
133s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 23:43

Sharing

Report Analysis Logs

General

Target

5a674022732ae6503a635a50efb71a70_NeikiAnalytics.exe
Size

14KB
MD5

5a674022732ae6503a635a50efb71a70
SHA1

e788f2a4d04751debb54ea36c52ec77c3ba318cd
SHA256

d28b435c89e391eb9449fa4c6578022e1380fb8c1f1a62c373c0166d251c18fd
SHA512

3e9d8d0c661b02b2c09fd234423fe031682aba2dbd1e2724aebd083f7ee079d69d1936c74f6242ac61c2819b3f27c90d3a81391565182871dfc8d19335b7e0b2
SSDEEP

384:8Bi5QLm7Mffffffffffffffvu0FwDE045H:8Iyv6A

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1928 3500 WerFault.exe 5a674022732ae6503a635a50efb71a70_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\5a674022732ae6503a635a50efb71a70_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\5a674022732ae6503a635a50efb71a70_NeikiAnalytics.exe"
1⤵
PID:3500

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3500 -s 224
2⤵
- Program crash
PID:1928

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3500 -ip 3500
1⤵
PID:2272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3500-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download