84d0d34629ceb25d975edb6dbeec5c5efc6308d1edeba7e2ebb8b6ba7abb98a9

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 10:35

Target
a0429fb6a9693e9b383f1bfe20bd0870_NeikiAnalytics.exe
Size 184KB
Sample240603-mm1dfscg43
SHA256 84d0d34629ceb25d975edb6dbeec5c5efc6308d1edeba7e2ebb8b6ba7abb98a9
MD5 a0429fb6a9693e9b383f1bfe20bd0870
SHA1 0dd537802d194d55e7df741e2e4fd94ab2776528
SHA512 534e34a024bca12fb86e306813ce5ec23ad1b3423e790d527d996c7a88e40c4e669e5b5d7ac694bf79f5dcb77226ebaf035b39fb4046ab98eb217ed4b9781b2c
SSDEEP 3072:10JpPMoO9goCZRhtKAqZ8slzvlvnqlxiuI:10MoGqRhA8MzvlPqlxiu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3572	4464	WerFault.exe	81

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4464	a0429fb6a9693e9b383f1bfe20bd0870_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\a0429fb6a9693e9b383f1bfe20bd0870_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\a0429fb6a9693e9b383f1bfe20bd0870_NeikiAnalytics.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4464
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4464 -s 724
  2⤵
  - Program crash
  PID:3572

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 372 -p 4464 -ip 4464
1⤵
PID:3796