Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/05/2024, 18:07

General

  • Target

    037752829073b60856d200a70d338410_NeikiAnalytics.exe

  • Size

    107KB

  • MD5

    037752829073b60856d200a70d338410

  • SHA1

    63441846c391b7de9563c9dee194bc2977a099d9

  • SHA256

    a7ff07e38fdc296c53a6d7ebf20b69b1c9c65a766a3a8d907129851cc92d809e

  • SHA512

    5920edd1163828f15fb97308a983e6d202ff916a695c3b2ddf6e49a678dff083f781b27bf325a121e970d8d6bc298d7c6b125f7bd0b43cb17e9024d46fb671d2

  • SSDEEP

    3072:uhWvfnAo405Xab/s7JxZBgXs4tvHVA5wzQ5dJgW:RhKbIJKcUVA5p5P

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\037752829073b60856d200a70d338410_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\037752829073b60856d200a70d338410_NeikiAnalytics.exe"
    1⤵
      PID:4344
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 4344 -s 1040
        2⤵
        • Program crash
        PID:3652
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 4344 -ip 4344
      1⤵
        PID:3724

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4344-0-0x000000007528E000-0x000000007528F000-memory.dmp

              Filesize

              4KB

            • memory/4344-1-0x0000000000F30000-0x0000000000F50000-memory.dmp

              Filesize

              128KB

            • memory/4344-2-0x0000000075280000-0x0000000075A30000-memory.dmp

              Filesize

              7.7MB

            • memory/4344-3-0x0000000075280000-0x0000000075A30000-memory.dmp

              Filesize

              7.7MB