Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

2d69aa1a20...KI.exe

windows7-x64

7

2d69aa1a20...KI.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d69aa1a205225f27dda27e59c0f1890_NEIKI

  • Size

    717KB

  • Sample

    240507-zl3teafb4w

  • MD5

    2d69aa1a205225f27dda27e59c0f1890

  • SHA1

    3a3755dbd71428a0b094ab4ccef9a87365180e29

  • SHA256

    0c4fd187f1ed90125c70e5d39664900d84c3dfe85e3401c8282f8b51ff19d3d1

  • SHA512

    3af2086e3b80a5cd9039e005a104ff6dd0e37560cc599204003006e1092d5b14ccaf8d6148f09fe9b38381e1ec97d6525f78b94aebf01f320c71fdb599e0f7dd

  • SSDEEP

    12288:2pR3MqWOKw7yWMJFLubMNfntcanU+SH7:iR84fmX8ItHnXI

Score
7/10

Malware Config

Targets

    • Target

      2d69aa1a205225f27dda27e59c0f1890_NEIKI

    • Size

      717KB

    • MD5

      2d69aa1a205225f27dda27e59c0f1890

    • SHA1

      3a3755dbd71428a0b094ab4ccef9a87365180e29

    • SHA256

      0c4fd187f1ed90125c70e5d39664900d84c3dfe85e3401c8282f8b51ff19d3d1

    • SHA512

      3af2086e3b80a5cd9039e005a104ff6dd0e37560cc599204003006e1092d5b14ccaf8d6148f09fe9b38381e1ec97d6525f78b94aebf01f320c71fdb599e0f7dd

    • SSDEEP

      12288:2pR3MqWOKw7yWMJFLubMNfntcanU+SH7:iR84fmX8ItHnXI

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks