Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
96s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
14/06/2024, 00:47
Static task
static1
Behavioral task
behavioral1
Sample
94d20cd5da0409f169c6ff1c0fda2e30_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
94d20cd5da0409f169c6ff1c0fda2e30_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
94d20cd5da0409f169c6ff1c0fda2e30_NeikiAnalytics.exe
-
Size
14KB
-
MD5
94d20cd5da0409f169c6ff1c0fda2e30
-
SHA1
389012da23522ae7ae3583e2137d9d7c1e34c060
-
SHA256
4698113fd195a39f933c1002a491e8e1fa140bed0edd98b86d4877b98af185aa
-
SHA512
3acc689878de7dc7573c8b0c16796b8002118829c28a8fefab21319d22d8f52cf2d544b2b3b0494e86b5d938cd0f6940a6b5c6948d0a02e5ac43ef9dab48f239
-
SSDEEP
192:KW58flYjuh6TaGkoTiIGaZiau4OQktQmOKkhE7/9j8TQSo2txfqDE045HQdWhWhN:K88f36xkoGkZiJZtQ8eUlItsDE045H
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4184 3708 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\94d20cd5da0409f169c6ff1c0fda2e30_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\94d20cd5da0409f169c6ff1c0fda2e30_NeikiAnalytics.exe"1⤵PID:3708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3708 -s 2162⤵
- Program crash
PID:4184
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3708 -ip 37081⤵PID:4304