Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27/05/2024, 06:32
Static task
static1
Behavioral task
behavioral1
Sample
22d60c41be92823e063fa0822e85ae20_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
22d60c41be92823e063fa0822e85ae20_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
22d60c41be92823e063fa0822e85ae20_NeikiAnalytics.exe
-
Size
14KB
-
MD5
22d60c41be92823e063fa0822e85ae20
-
SHA1
cb5b4cb4f427a31e9ecfd146294a3ea0b5f59c18
-
SHA256
57b6eff18ea49abdbce59cf3b8138ca93e9fab436d6db38bb23533d5af17dd82
-
SHA512
14710d1f73556757938b20a0eaa986c0e5b234c2569def8671c6cf22f5758cf5a76d0b7d7e6c31d58bc089056351936dd5633978614d2a6b4b3afa8af7b3647d
-
SSDEEP
192:XFRKlmKfQBRJDn0KRQQQQQQQQQQQQQQVW+Stt8wrmVqDE045HQMm////:XFRKlcnD0KMEw6sDE045Hh
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1064 952 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\22d60c41be92823e063fa0822e85ae20_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\22d60c41be92823e063fa0822e85ae20_NeikiAnalytics.exe"1⤵PID:952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 952 -s 2162⤵
- Program crash
PID:1064
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 952 -ip 9521⤵PID:3208