Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

aa1b8a43e2...KI.exe

windows7-x64

10

aa1b8a43e2...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa1b8a43e22020b6660926da544050c0_NEIKI

  • Size

    93KB

  • Sample

    240508-c28chaec21

  • MD5

    aa1b8a43e22020b6660926da544050c0

  • SHA1

    a42bccb49c740c89b8d643037d70369658970e8d

  • SHA256

    a6145a28cfc3754c80484d65e1cdcfedf0b40e0911de971404e0e88009a9567d

  • SHA512

    1a93d19e85750142004f3910e47f91d10b19f74ab41d00a707d38fd515d339ba85e696cdbab46ef126241449897eacc137b69c340dcf9ba2708096767f5a970f

  • SSDEEP

    1536:+/eR7Irhq1kbQFibn34qQ+6LQrskHjrsRQAjRkRLJzeLD9N0iQGRNQR8RyV+32rR:+/eRUY18Hb3/rskHseGSJdEN0s4WE+3K

Score
10/10
persistence

Malware Config

Targets

    • Target

      aa1b8a43e22020b6660926da544050c0_NEIKI

    • Size

      93KB

    • MD5

      aa1b8a43e22020b6660926da544050c0

    • SHA1

      a42bccb49c740c89b8d643037d70369658970e8d

    • SHA256

      a6145a28cfc3754c80484d65e1cdcfedf0b40e0911de971404e0e88009a9567d

    • SHA512

      1a93d19e85750142004f3910e47f91d10b19f74ab41d00a707d38fd515d339ba85e696cdbab46ef126241449897eacc137b69c340dcf9ba2708096767f5a970f

    • SSDEEP

      1536:+/eR7Irhq1kbQFibn34qQ+6LQrskHjrsRQAjRkRLJzeLD9N0iQGRNQR8RyV+32rR:+/eRUY18Hb3/rskHseGSJdEN0s4WE+3K

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks