Overview

overview

3

Static

static

3

2f241b64af...cs.exe

windows7-x64

1

2f241b64af...cs.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    143s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/05/2024, 22:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2f241b64aff150e4c77fa7bb78cc5080_NeikiAnalytics.exe

  • Size

    91KB

  • MD5

    2f241b64aff150e4c77fa7bb78cc5080

  • SHA1

    be9eba4c544eabc001a4012c69ccda50c3e5b9f0

  • SHA256

    6e2399dce7b95ad4823e05698305cc0045b27be57194d9e25b6e90db39e2e900

  • SHA512

    52005049bf5a6c0836f449721c4ac344bdad5a45e5c15b242af912381556324f9372e26fd6be1707c1c5bdaf230017a1b11ba4a0214c27138be22265a88b6239

  • SSDEEP

    768:jfGTaJC1QEtNwwzttk/j2Pjc+/Sf5szbCgUpuSLzJ:1xw7c+Y6bk9LF

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2f241b64aff150e4c77fa7bb78cc5080_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\2f241b64aff150e4c77fa7bb78cc5080_NeikiAnalytics.exe"
    1⤵
      PID:4596
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4596 -s 216
        2⤵
        • Program crash
        PID:1720
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4596 -ip 4596
      1⤵
        PID:2320
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3280 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:8
        1⤵
          PID:1348

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4596-0-0x0000000002C70000-0x0000000002C9E000-memory.dmp

          Filesize

          184KB

          Download