Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 20:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
683deade94d2f09db6f9d4918c59a520_NeikiAnalytics.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
683deade94d2f09db6f9d4918c59a520_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
683deade94d2f09db6f9d4918c59a520_NeikiAnalytics.exe
-
Size
151KB
-
MD5
683deade94d2f09db6f9d4918c59a520
-
SHA1
897db48989f7a1536672759bf013a94dd99ae55c
-
SHA256
197d46e24380d1ed025d32d2c0140c7edd5ef3d9830a9ce5182616fcf9d66dca
-
SHA512
a3c79cd6b96e690ca05ea6ad89590114fbb411c6b44fc530cf124e9cb53d3634e3776eda4ba7d89f33ef7f6d871060f2eeb518a5fc578593608b786babf01d79
-
SSDEEP
3072:V80Y44bcb5XNNT3Up9LBU/Uja4GoXn+34zBsytgc:KT44bc7zoXzsy
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4948 4332 WerFault.exe 683deade94d2f09db6f9d4918c59a520_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\683deade94d2f09db6f9d4918c59a520_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\683deade94d2f09db6f9d4918c59a520_NeikiAnalytics.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4332 -s 11042⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4332 -ip 43321⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4332-0-0x00000000753BE000-0x00000000753BF000-memory.dmpFilesize
4KB
-
memory/4332-1-0x0000000000950000-0x000000000097C000-memory.dmpFilesize
176KB
-
memory/4332-2-0x00000000057F0000-0x0000000005D94000-memory.dmpFilesize
5.6MB
-
memory/4332-3-0x0000000005320000-0x00000000053B2000-memory.dmpFilesize
584KB
-
memory/4332-4-0x00000000057A0000-0x00000000057AA000-memory.dmpFilesize
40KB
-
memory/4332-5-0x00000000753B0000-0x0000000075B60000-memory.dmpFilesize
7.7MB
-
memory/4332-6-0x00000000753B0000-0x0000000075B60000-memory.dmpFilesize
7.7MB