Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
29-05-2024 13:19
Behavioral task
behavioral1
Sample
5589d63e70c86b381b7b5ea2e6212be0_NeikiAnalytics.exe
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5589d63e70c86b381b7b5ea2e6212be0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
5589d63e70c86b381b7b5ea2e6212be0_NeikiAnalytics.exe
-
Size
71KB
-
MD5
5589d63e70c86b381b7b5ea2e6212be0
-
SHA1
013b48a1e0a058784100290fe854f5344456ff72
-
SHA256
032511864b77f733c52a89b132379702fd24d37d2763647513e57bc5e6bcae0c
-
SHA512
df06dd1a5ea8de47800ef841a1f7fb87ebe9a021dea8f63a10d94bfad293fa9e99f0901340d351d0f58dd2d436c8698a71c269823d12a9fe619dc0515171157b
-
SSDEEP
1536:Hv+UwHs2BhCejPXTpGsP1Ee3nJpVtpWfFhddpIFUc:BwbhCeL1GsP1Ee3ZtUpI6
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1588 2472 WerFault.exe 5589d63e70c86b381b7b5ea2e6212be0_NeikiAnalytics.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5589d63e70c86b381b7b5ea2e6212be0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5589d63e70c86b381b7b5ea2e6212be0_NeikiAnalytics.exe"1⤵PID:2472
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2472 -s 4922⤵
- Program crash
PID:1588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2472 -ip 24721⤵PID:4312