Analysis
-
max time kernel
132s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27-05-2024 02:01
Behavioral task
behavioral1
Sample
17972510a7e861bf2200eccad8b4c910_NeikiAnalytics.exe
Resource
win7-20240419-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
17972510a7e861bf2200eccad8b4c910_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
17972510a7e861bf2200eccad8b4c910_NeikiAnalytics.exe
-
Size
140KB
-
MD5
17972510a7e861bf2200eccad8b4c910
-
SHA1
06d03646b1046a49dd8b840e09e263e650f21530
-
SHA256
12cc294efea437413d40a3551ffab7ecc7d913dc0b2eb9537ba622325cad9c6a
-
SHA512
3104fb076d66c69e664b49626a97355644dc37f18556ec4d27533df0772e8e4ba247321e5761ffafea33fd04e8abb963b82c1e059f2766b3d9faddd55decc761
-
SSDEEP
1536:UQjtpOV2d8YNzq37NaP29ZmbDcjaL2vK3Z4XCAX3nvZW1657VFpx:tO3YNO7cvLX3ZrB1657VFp
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3636 2696 WerFault.exe 17972510a7e861bf2200eccad8b4c910_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\17972510a7e861bf2200eccad8b4c910_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\17972510a7e861bf2200eccad8b4c910_NeikiAnalytics.exe"1⤵PID:2696
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2696 -s 2162⤵
- Program crash
PID:3636
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2696 -ip 26961⤵PID:4388
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4200,i,13035806169561352434,1332896185314862791,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:81⤵PID:2504