Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

c63bb200e4...KI.exe

windows7-x64

7

c63bb200e4...KI.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c63bb200e4bd7823efcb4522194bc8d0_NEIKI

  • Size

    104KB

  • Sample

    240508-elkbvahf4s

  • MD5

    c63bb200e4bd7823efcb4522194bc8d0

  • SHA1

    423c9a159a61f1e0311c82ca8ffdf2fe4e308c68

  • SHA256

    0b54ebb24f8c0d7dfadd75ba25903a02800ae3e29326afec429aeae6a64c61cf

  • SHA512

    83c1d64e5f96d8af8daabb5e9768fb3f961301badae0d7d54b278c7fba0872c85bf0f60c247b984d17110c24c2d3489845c5ff4481b6775d2d40d04e605c8bf9

  • SSDEEP

    1536:2zfXIsxrhzk2nfsW3ou3yWW2dvcW6eHcBwUi6vWE0Dl27b58XBdqaMGxuA11:yfjxrhzk2nfsWhP7dvavi6vWEbh8Xv

Score
7/10

Malware Config

Targets

    • Target

      c63bb200e4bd7823efcb4522194bc8d0_NEIKI

    • Size

      104KB

    • MD5

      c63bb200e4bd7823efcb4522194bc8d0

    • SHA1

      423c9a159a61f1e0311c82ca8ffdf2fe4e308c68

    • SHA256

      0b54ebb24f8c0d7dfadd75ba25903a02800ae3e29326afec429aeae6a64c61cf

    • SHA512

      83c1d64e5f96d8af8daabb5e9768fb3f961301badae0d7d54b278c7fba0872c85bf0f60c247b984d17110c24c2d3489845c5ff4481b6775d2d40d04e605c8bf9

    • SSDEEP

      1536:2zfXIsxrhzk2nfsW3ou3yWW2dvcW6eHcBwUi6vWE0Dl27b58XBdqaMGxuA11:yfjxrhzk2nfsWhP7dvavi6vWEbh8Xv

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks