Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d0ea44dcf0...KI.exe

windows7-x64

10

d0ea44dcf0...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0ea44dcf0fca383026e0cc9c1477180_NEIKI

  • Size

    280KB

  • Sample

    240508-e6ypzaah8v

  • MD5

    d0ea44dcf0fca383026e0cc9c1477180

  • SHA1

    c484ea05bbaf72c582488b6b1f995afd2ac5ba85

  • SHA256

    a106ffdb21cc898432833059487005da80ff89081db8fc32571b6de902a66345

  • SHA512

    1bd88c349317e5838a2f412dedd36a26a34e9e33fda9168c3018c75969de20e5a3e5e49e0786102ab0ddfc25da5b1c480be696f993cd79e714bc94ba92720532

  • SSDEEP

    1536:TGS7xMNm8WdutSUd5kKGktWWAWIcyohseMUKPeoxZslAGhZxPBljjGs8f7hG6q+j:KhWwAU4gA4hZK7xVG9Btj676ZBI

Score
10/10
persistence

Malware Config

Targets

    • Target

      d0ea44dcf0fca383026e0cc9c1477180_NEIKI

    • Size

      280KB

    • MD5

      d0ea44dcf0fca383026e0cc9c1477180

    • SHA1

      c484ea05bbaf72c582488b6b1f995afd2ac5ba85

    • SHA256

      a106ffdb21cc898432833059487005da80ff89081db8fc32571b6de902a66345

    • SHA512

      1bd88c349317e5838a2f412dedd36a26a34e9e33fda9168c3018c75969de20e5a3e5e49e0786102ab0ddfc25da5b1c480be696f993cd79e714bc94ba92720532

    • SSDEEP

      1536:TGS7xMNm8WdutSUd5kKGktWWAWIcyohseMUKPeoxZslAGhZxPBljjGs8f7hG6q+j:KhWwAU4gA4hZK7xVG9Btj676ZBI

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks