Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
86684ed0292affee1bb447513c6d9e90_NEIKI
-
Size
119KB
-
Sample
240508-2r2veabg51
-
MD5
86684ed0292affee1bb447513c6d9e90
-
SHA1
dc69b2ae4a237c7c967e13ce23528eb93fd4d644
-
SHA256
e4e2bfa4f55f020add3543c5b89db315ed5c8c0da1c30b883e0b705bd949d4a1
-
SHA512
c215b5574ab7bfcc7cda4d9119678ee33a6257fded4cc4c04a6d54667e5862ab0bd4807adebbe43c2fd2ce96cf8bcd44540e7c75e30a3b7624ea6d4d0257e6b0
-
SSDEEP
3072:+4n+6n/mZwDkI6KNVdP2NKSpFNgqdNTO27w1vv:hXUw4I6IagQFNgqzwl
Static task
static1
Behavioral task
behavioral1
Sample
86684ed0292affee1bb447513c6d9e90_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
86684ed0292affee1bb447513c6d9e90_NEIKI.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
86684ed0292affee1bb447513c6d9e90_NEIKI
-
Size
119KB
-
MD5
86684ed0292affee1bb447513c6d9e90
-
SHA1
dc69b2ae4a237c7c967e13ce23528eb93fd4d644
-
SHA256
e4e2bfa4f55f020add3543c5b89db315ed5c8c0da1c30b883e0b705bd949d4a1
-
SHA512
c215b5574ab7bfcc7cda4d9119678ee33a6257fded4cc4c04a6d54667e5862ab0bd4807adebbe43c2fd2ce96cf8bcd44540e7c75e30a3b7624ea6d4d0257e6b0
-
SSDEEP
3072:+4n+6n/mZwDkI6KNVdP2NKSpFNgqdNTO27w1vv:hXUw4I6IagQFNgqzwl
Score8/10-
Contacts a large (505) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Executes dropped EXE
-
Drops file in System32 directory
-