Overview

overview

3

Static

static

3

216ab7c709...cs.exe

windows7-x64

1

216ab7c709...cs.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    129s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/05/2024, 05:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    216ab7c70982f01e8d63152d12e49190_NeikiAnalytics.exe

  • Size

    171KB

  • MD5

    216ab7c70982f01e8d63152d12e49190

  • SHA1

    5e8e59de03b9bc2ecfdbac1e949b03983f6ec5c6

  • SHA256

    af586031ba6beb9e195b0ea0f94fe2d733f5dd26f755bf3acb6b2bdc6cde6ba1

  • SHA512

    44db71607c13ba34b03c2a0ef00de4b1ffa65f8407e8923d5865b373b7f69d48ef1d2c57eea425915a3c096cf670f13f7a3436dcf3f48bf2e2a97a98eb047a92

  • SSDEEP

    1536:lxwqp+Zfl7Z/0l3N2OLvLINHU+wfvxMx0lhqoY9ateo1QgSZ/0l3N2OLvLINHU+i:N2d7Z/6AKLIRogobteEQFZ/6AKLIRo

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\216ab7c70982f01e8d63152d12e49190_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\216ab7c70982f01e8d63152d12e49190_NeikiAnalytics.exe"
    1⤵
      PID:5796
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 5796 -s 216
        2⤵
        • Program crash
        PID:5188
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5796 -ip 5796
      1⤵
        PID:3108

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/5796-0-0x0000000005300000-0x0000000005358A1C-memory.dmp

        Filesize

        354KB

        Download