Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-06-2024 00:44

General

  • Target

    5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe

  • Size

    184KB

  • MD5

    648958ca940b7384fc86a751323d3190

  • SHA1

    3e5bdec77c9b74f39d6b9949f460422c0bb15676

  • SHA256

    5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a

  • SHA512

    43b6d81baf01060ed5e43ff0bc89572aadd43a39e97d7c6fc0f1bb2aa7efa5f33ff9acb662429a317a414a609415a663501c7ab26936f03a009cb05a2a2fa48c

  • SSDEEP

    3072:Uxb70bovWOKsu47Z3e5n50XX1lvnqnxiuc:UxMouz47M52X1lPqnxiu

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\5050bc2b2286513d1f63818a103273eec256a4675851debc2085c87e47a7850a_NeikiAnalytics.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3312
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 3312 -s 464
      2⤵
      • Program crash
      PID:208
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3312 -ip 3312
    1⤵
      PID:3700

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads