Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
07/06/2024, 13:12
Static task
static1
Behavioral task
behavioral1
Sample
5baa82bdf843c139be28413927f2f630_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5baa82bdf843c139be28413927f2f630_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5baa82bdf843c139be28413927f2f630_NeikiAnalytics.exe
-
Size
14KB
-
MD5
5baa82bdf843c139be28413927f2f630
-
SHA1
30ebe9339a13cbba7223b6ce2a54f3c0c2e87706
-
SHA256
3421d10f33429cbd839b3830d940e7c0241a3a21517c26d64e13261e5c86c1a4
-
SHA512
cbfcc08fe5aff4af0cd3224cc9864cab493b5f7bb46db44b8ed5af594d378c91eca219cc2c559cd4d0f0a133be77b80359995f58d6d2bc7f485d70783c7d86f8
-
SSDEEP
384:B3mvxZaWoeFF6xsd3Xxsd3Xxsd3Xxsd3Xxsd3Xxsd3Xxsd3Xxsd3Xxsd3Xxsd3MS:B3mLKa3Xa3Xa3Xa3Xa3Xa3Xa3Xa3Xa3u
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4232 3996 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\5baa82bdf843c139be28413927f2f630_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\5baa82bdf843c139be28413927f2f630_NeikiAnalytics.exe"1⤵PID:3996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3996 -s 2162⤵
- Program crash
PID:4232
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3996 -ip 39961⤵PID:3644