Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
30/05/2024, 06:00
Static task
static1
Behavioral task
behavioral1
Sample
6767a4421bc02ab2fb64c0124f1c4dc0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6767a4421bc02ab2fb64c0124f1c4dc0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
6767a4421bc02ab2fb64c0124f1c4dc0_NeikiAnalytics.exe
-
Size
14KB
-
MD5
6767a4421bc02ab2fb64c0124f1c4dc0
-
SHA1
ebd3ab5d9250f1e842b5a918738924504743b692
-
SHA256
f44b8e3c3018c4a4bd6553ccac277702edccd02db6cc5b211d0ed0b87e03a2c7
-
SHA512
e1eb752141b619a843376f733b91981f50393d7c55f82ee8ff0505ca6018350555c42493573f597eab9200c7df83c94c994d4946f33bb28ccda478220d4e06f3
-
SSDEEP
192:gBtFanjNpt+xKWrQVN/BA6sg6kjmvwVxuXvcqDE045HQ:gBOnDJdC6sRs0vbDE045H
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4852 3800 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\6767a4421bc02ab2fb64c0124f1c4dc0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\6767a4421bc02ab2fb64c0124f1c4dc0_NeikiAnalytics.exe"1⤵PID:3800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3800 -s 2162⤵
- Program crash
PID:4852
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3800 -ip 38001⤵PID:2412