Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2f493c9a4f...KI.exe

windows7-x64

10

2f493c9a4f...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f493c9a4f56def2aa328b3d5d3cc620_NEIKI

  • Size

    304KB

  • Sample

    240507-zpkf8saa99

  • MD5

    2f493c9a4f56def2aa328b3d5d3cc620

  • SHA1

    b189979927f93a57ae123f8f9817863a89583339

  • SHA256

    90286ce38335d59cb7c2f0941ab3e80ef2c2205c94d9848f14b9e34d8e4b69c4

  • SHA512

    a503f30b06928b3f7964fe46fff9b92f8b227b9f217c57adcae2a6c40d4c731e021048e8635b849feee7509504fa8b0d2d19415f6cc7f0b1dacbfcacbec6cbdf

  • SSDEEP

    3072:VCfruvJYo2LT6AxeIejz+k5rD0LZSnulc0VP7SnHjg:VCjM2oqTlEIEKIrD0Lu

Score
10/10
persistence

Malware Config

Targets

    • Target

      2f493c9a4f56def2aa328b3d5d3cc620_NEIKI

    • Size

      304KB

    • MD5

      2f493c9a4f56def2aa328b3d5d3cc620

    • SHA1

      b189979927f93a57ae123f8f9817863a89583339

    • SHA256

      90286ce38335d59cb7c2f0941ab3e80ef2c2205c94d9848f14b9e34d8e4b69c4

    • SHA512

      a503f30b06928b3f7964fe46fff9b92f8b227b9f217c57adcae2a6c40d4c731e021048e8635b849feee7509504fa8b0d2d19415f6cc7f0b1dacbfcacbec6cbdf

    • SSDEEP

      3072:VCfruvJYo2LT6AxeIejz+k5rD0LZSnulc0VP7SnHjg:VCjM2oqTlEIEKIrD0Lu

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks