5e4ea36762c6a655aecbf8bd7a7d6a1eed50c7dd8366d85648cebfab64f7c0bc | Triage

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25-05-2024 19:07

Sharing

Report Analysis Logs

General

Target

0df826c9faf38e7c5bf06d51fe37a3d0_NeikiAnalytics.exe
Size

229KB
MD5

0df826c9faf38e7c5bf06d51fe37a3d0
SHA1

c32d0cfdb9c77cad2cf609efe466539b24e7f580
SHA256

5e4ea36762c6a655aecbf8bd7a7d6a1eed50c7dd8366d85648cebfab64f7c0bc
SHA512

e0a34422a494f8878dc2a568c6fa6d3c066e1cb1f06e150ff85543ec5e0c6bad20f9e078d3dff7686e0c2f7dc67a37fe47c582d3603e94e704a621d48225c5bf
SSDEEP

6144:7iVQQG75dpcElElt/DgK1yuFShGJm2BA:rBKE6LguFSYJA

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4420 4160 WerFault.exe 0df826c9faf38e7c5bf06d51fe37a3d0_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\0df826c9faf38e7c5bf06d51fe37a3d0_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\0df826c9faf38e7c5bf06d51fe37a3d0_NeikiAnalytics.exe"
1⤵
PID:4160

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4160 -s 340
2⤵
- Program crash
PID:4420

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4160 -ip 4160
1⤵
PID:640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...