Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

a29a8d0bcf...KI.exe

windows7-x64

10

a29a8d0bcf...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a29a8d0bcf2e989b9f2df9b5023804e0_NEIKI

  • Size

    224KB

  • Sample

    240508-ck5v2sdb51

  • MD5

    a29a8d0bcf2e989b9f2df9b5023804e0

  • SHA1

    c4c193452460fa11b257368387e29e37bcfa0e86

  • SHA256

    0ae7b1a3b2775bc8c1a521982f49a594d94df2410c868b9b820e0e600a7c4873

  • SHA512

    e817df28e1bfa286ee469f94942efe3f542f33df3f9097aff6f7032506c7db96a21411a70af6bf5f28a3f198a90d62f735a35cdadf04e5efa09d2752709550bc

  • SSDEEP

    3072:pYfWjeyCoVjIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgtSU:pYmthB4s5tTDUZNSN58VU5tTtf

Score
10/10
persistence

Malware Config

Targets

    • Target

      a29a8d0bcf2e989b9f2df9b5023804e0_NEIKI

    • Size

      224KB

    • MD5

      a29a8d0bcf2e989b9f2df9b5023804e0

    • SHA1

      c4c193452460fa11b257368387e29e37bcfa0e86

    • SHA256

      0ae7b1a3b2775bc8c1a521982f49a594d94df2410c868b9b820e0e600a7c4873

    • SHA512

      e817df28e1bfa286ee469f94942efe3f542f33df3f9097aff6f7032506c7db96a21411a70af6bf5f28a3f198a90d62f735a35cdadf04e5efa09d2752709550bc

    • SSDEEP

      3072:pYfWjeyCoVjIuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgtSU:pYmthB4s5tTDUZNSN58VU5tTtf

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks