Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
03/06/2024, 23:41
Static task
static1
Behavioral task
behavioral1
Sample
129ce9958ce6269609f74600083b0330_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
129ce9958ce6269609f74600083b0330_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
129ce9958ce6269609f74600083b0330_NeikiAnalytics.exe
-
Size
14KB
-
MD5
129ce9958ce6269609f74600083b0330
-
SHA1
6034bc5d1f4f2453adec43b636f23c1b4c34d8d5
-
SHA256
bc19182e8d8f61be3e4eac7c3a4859b9f74a49cf3658d78b642e178a4e25c42b
-
SHA512
96f79a4984d95b4747d6c3eb05efbba8d3790a024352f28184d9b3c5c9daed691654a39d6c7e9aba58e47fc842902e74b9a96ff2998023e43bec9d369e527621
-
SSDEEP
384:nw/pBKUe25ZqAqAqAqAqAPLc2EDE045HZqqqq:nGLHqAqAqAqAqAPLc2eATqqqq
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 664 3916 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\129ce9958ce6269609f74600083b0330_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\129ce9958ce6269609f74600083b0330_NeikiAnalytics.exe"1⤵PID:3916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3916 -s 2242⤵
- Program crash
PID:664
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3916 -ip 39161⤵PID:3688