e39556a1d117e90814bb17325ffb9c42dc22b6f28b5981572857459f66b86b79 | Triage

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 20:58

Sharing

Report Analysis Logs

General

Target

3a0483fe57dc7fa4fe5896713094d860_NeikiAnalytics.exe
Size

14KB
MD5

3a0483fe57dc7fa4fe5896713094d860
SHA1

2ab42007de5c9aa5e5c895923b0432e4f21e25f7
SHA256

e39556a1d117e90814bb17325ffb9c42dc22b6f28b5981572857459f66b86b79
SHA512

5abdf5d534fb9c2214ed6877646c778631ee9f7099273689016542e26e864126a398c8d3c7f07d1be0f864d17d0f2eb71870afddecc7106499fbb645a8651706
SSDEEP

384:z5dy8iiQHw2avjufi4kdCDDt6RLuDE045H:D4zQhuR+YDcRoA

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1796 2544 WerFault.exe 3a0483fe57dc7fa4fe5896713094d860_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\3a0483fe57dc7fa4fe5896713094d860_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\3a0483fe57dc7fa4fe5896713094d860_NeikiAnalytics.exe"
1⤵
PID:2544
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2544 -s 252
  2⤵
  - Program crash
  PID:1796

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2544 -ip 2544
1⤵
PID:828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2544-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download