Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25/05/2024, 13:31
Static task
static1
Behavioral task
behavioral1
Sample
d93008966fc1fa4056fd934c05144b60_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d93008966fc1fa4056fd934c05144b60_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
d93008966fc1fa4056fd934c05144b60_NeikiAnalytics.exe
-
Size
14KB
-
MD5
d93008966fc1fa4056fd934c05144b60
-
SHA1
0f996ef79d18eb011dd22f1a904b4bc1c48c44be
-
SHA256
c83bb2c12c362258096badaf57cf32045c325e053ee37e3dc0cf60ab222cc1df
-
SHA512
717a2f56abe4094d7d48ae54f41a888e81fed9239d60f440d9d7e674c5aba5d5a72e84e2343f30ef6f3cb30d4c40f271184711b80f1471a8aed8dc84dde17ae1
-
SSDEEP
384:Tb9L0R2DZZZZZZZUOOOOOOOx5l64LiDE045HhMMM:Tb9L+2DZZZZZZZ3D/LYAbMMM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4840 4996 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\d93008966fc1fa4056fd934c05144b60_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\d93008966fc1fa4056fd934c05144b60_NeikiAnalytics.exe"1⤵PID:4996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 2162⤵
- Program crash
PID:4840
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4996 -ip 49961⤵PID:232