Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2a7f4ba10e...KI.exe

windows7-x64

10

2a7f4ba10e...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a7f4ba10e3e2e8a1f5113e81194e950_NEIKI

  • Size

    479KB

  • Sample

    240507-zf9prshe95

  • MD5

    2a7f4ba10e3e2e8a1f5113e81194e950

  • SHA1

    1fe981e52666c03fd2c1ccfcbb784e3241dc4c93

  • SHA256

    8a9bec158ffa0a5c3870400d1dff6e39312adb1080ad8ae96cd2af756a615ada

  • SHA512

    c3a02e4c459bc035f99cfe615a35b06688f4193a6b0875c02007e5d148043fb275444153da00ab81829cd01b05f3eb14491168befc7f5e67a11b6e4b8cb2891f

  • SSDEEP

    6144:IdO4XCv5+sycRJ6EQnT2leTLgNPx33fpu2leTLg:IdOEluRJ6EQ6Q2drQ

Score
10/10
persistence

Malware Config

Targets

    • Target

      2a7f4ba10e3e2e8a1f5113e81194e950_NEIKI

    • Size

      479KB

    • MD5

      2a7f4ba10e3e2e8a1f5113e81194e950

    • SHA1

      1fe981e52666c03fd2c1ccfcbb784e3241dc4c93

    • SHA256

      8a9bec158ffa0a5c3870400d1dff6e39312adb1080ad8ae96cd2af756a615ada

    • SHA512

      c3a02e4c459bc035f99cfe615a35b06688f4193a6b0875c02007e5d148043fb275444153da00ab81829cd01b05f3eb14491168befc7f5e67a11b6e4b8cb2891f

    • SSDEEP

      6144:IdO4XCv5+sycRJ6EQnT2leTLgNPx33fpu2leTLg:IdOEluRJ6EQ6Q2drQ

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks