Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
04/06/2024, 02:39
Static task
static1
Behavioral task
behavioral1
Sample
232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe
-
Size
2.1MB
-
MD5
232b1681f41cf550e9b6c1f14f6a96a0
-
SHA1
a668635a42647bc9fe7e359fe8807f9437b75e47
-
SHA256
093c7cb4622109d152954de7bc2fc2e9e54f8598f77524fcbf8395ede640c840
-
SHA512
3c573e88f1ca17bed00dbe6128ea3e83071daaa7003aa2d9947dc5f7cd1f4eff641a389c776801e6ee826508ddea2dd6897e991207a9fd52a58deebd74564905
-
SSDEEP
49152:vY3RmRqN2NPGtX6EkzhB6cqm4Y1+96rpOjsh3ANkTTl:umRqN2NPWkzKcn+96cQ3AM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2672 4632 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\232b1681f41cf550e9b6c1f14f6a96a0_NeikiAnalytics.exe"1⤵PID:4632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4632 -s 3802⤵
- Program crash
PID:2672
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4632 -ip 46321⤵PID:992