Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

5ab8ce7ca1...KI.exe

windows7-x64

10

5ab8ce7ca1...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ab8ce7ca10f9df77aed1a384dcded90_NEIKI

  • Size

    187KB

  • Sample

    240507-2xkhbafd69

  • MD5

    5ab8ce7ca10f9df77aed1a384dcded90

  • SHA1

    f2330ff2b311aefa2d8af38e75ad7056af7ff80d

  • SHA256

    03e1d2a8bfb16466d49dbc15829beb54c1926ce32ff7a683e6f583e23954f2cd

  • SHA512

    1ae661d07a734fef3263ee46269062338422b61cac812a810910128a86a6e3b0f7f6822eb73d249f1af01dfa9117d49a0becd08eedd40e2ee1ecf445ac213221

  • SSDEEP

    3072:3YYWDiB78cdAB602CVVgtRQ2c+tlB5xpWJLM77OkeCK2+hDueH:3YfDs7CVV+tbFOLM77OLLt

Score
10/10
persistence

Malware Config

Targets

    • Target

      5ab8ce7ca10f9df77aed1a384dcded90_NEIKI

    • Size

      187KB

    • MD5

      5ab8ce7ca10f9df77aed1a384dcded90

    • SHA1

      f2330ff2b311aefa2d8af38e75ad7056af7ff80d

    • SHA256

      03e1d2a8bfb16466d49dbc15829beb54c1926ce32ff7a683e6f583e23954f2cd

    • SHA512

      1ae661d07a734fef3263ee46269062338422b61cac812a810910128a86a6e3b0f7f6822eb73d249f1af01dfa9117d49a0becd08eedd40e2ee1ecf445ac213221

    • SSDEEP

      3072:3YYWDiB78cdAB602CVVgtRQ2c+tlB5xpWJLM77OkeCK2+hDueH:3YfDs7CVV+tbFOLM77OLLt

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks