Analysis
- max time kernel
128s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
03/06/2024, 10:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a0711694bf43309e266138c75cacf030_NeikiAnalytics.exe
Resource
win7-20240419-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a0711694bf43309e266138c75cacf030_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
- Target a0711694bf43309e266138c75cacf030_NeikiAnalytics.exe
- Size 409KB
- Sample240603-mq2exsch67
- SHA256 2690e62af08bc4be7e092858273541717639f2892f9acc88b10c22a744f98d84
- MD5 a0711694bf43309e266138c75cacf030
- SHA1 4f1b1657cec107e835c4a622bafc6b07670a4163
- SHA512 b9a7362ea033f5df5e91d47db8ab8beb474c800a769a9239c4023643cd402157a3821734ac87eae36fe30178ba7e71c1ceb5d54bec7930ac2ea5825d4e5a0918
- SSDEEP 6144:maJ2RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uTs6gnx77iZGW9V299S+gPiI:D2EB6NxDIBuOFe7/uTsYC9S+s3
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3652 4964 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\a0711694bf43309e266138c75cacf030_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\a0711694bf43309e266138c75cacf030_NeikiAnalytics.exe"1⤵PID:4964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 2162⤵
- Program crash
PID:3652
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4964 -ip 49641⤵PID:516