Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
29/06/2024, 07:52
Static task
static1
Behavioral task
behavioral1
Sample
8506f045afd194ef2c837e872d2fec699797f515e8b1d0a287258f69da1fa0d7_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
8506f045afd194ef2c837e872d2fec699797f515e8b1d0a287258f69da1fa0d7_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
8506f045afd194ef2c837e872d2fec699797f515e8b1d0a287258f69da1fa0d7_NeikiAnalytics.exe
-
Size
664KB
-
MD5
77a5abcb24e77d831f9640f9d2b868a0
-
SHA1
57d521f3699265033de9a85c18b2fdf485df746f
-
SHA256
8506f045afd194ef2c837e872d2fec699797f515e8b1d0a287258f69da1fa0d7
-
SHA512
6b4a8c20b1fed1824b32b04b6878079afb26da96eb0cac400d439c1ca899e6088be2883377829c7b150947ab63cbb754e5fbfb72eb3c220e1c21eb60ec1e9813
-
SSDEEP
12288:DTyjXW+48qWywrU4kGFTOAVuJ5PIGww7F5DO3HYffS:fIXW/8yw1T54lIYF5SXYHS
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1448 2160 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\8506f045afd194ef2c837e872d2fec699797f515e8b1d0a287258f69da1fa0d7_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\8506f045afd194ef2c837e872d2fec699797f515e8b1d0a287258f69da1fa0d7_NeikiAnalytics.exe"1⤵PID:2160
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2160 -s 5162⤵
- Program crash
PID:1448
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2160 -ip 21601⤵PID:4636