Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cf4af0caeb...KI.exe

windows7-x64

10

cf4af0caeb...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf4af0caebeec9dc25f9e5014b06d9f0_NEIKI

  • Size

    96KB

  • Sample

    240508-e3pmwsaf6x

  • MD5

    cf4af0caebeec9dc25f9e5014b06d9f0

  • SHA1

    6e5a42a6c2f7f15a7b8aa67442626917950d5950

  • SHA256

    97e8585b23e0f5d37982c0c15d72ef8c379d5a39bfae0b1a4887a61e1255b8f6

  • SHA512

    db456315b85205edd5e5a003b419eeb040246ba67fa1f97bd7bae1b3795fd91667c683deb34acc26bfc9c4c598d18e851d4b8ae39748195bd1963ba22d572b54

  • SSDEEP

    1536:WvOtmk+LUFY6OhIRGYIyKDn5b2y4okGuhDsAZI0Wyt1/BOmq7CMy0QiLiizHNQNM:ikmkEuBR/9KDhqmA6c5Om4CMyELiAHOi

Score
10/10
persistence

Malware Config

Targets

    • Target

      cf4af0caebeec9dc25f9e5014b06d9f0_NEIKI

    • Size

      96KB

    • MD5

      cf4af0caebeec9dc25f9e5014b06d9f0

    • SHA1

      6e5a42a6c2f7f15a7b8aa67442626917950d5950

    • SHA256

      97e8585b23e0f5d37982c0c15d72ef8c379d5a39bfae0b1a4887a61e1255b8f6

    • SHA512

      db456315b85205edd5e5a003b419eeb040246ba67fa1f97bd7bae1b3795fd91667c683deb34acc26bfc9c4c598d18e851d4b8ae39748195bd1963ba22d572b54

    • SSDEEP

      1536:WvOtmk+LUFY6OhIRGYIyKDn5b2y4okGuhDsAZI0Wyt1/BOmq7CMy0QiLiizHNQNM:ikmkEuBR/9KDhqmA6c5Om4CMyELiAHOi

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks