Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cb64c36ae3...KI.exe

windows7-x64

10

cb64c36ae3...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb64c36ae3b7962877b3dca72d4bc680_NEIKI

  • Size

    390KB

  • Sample

    240508-ewe5waab7v

  • MD5

    cb64c36ae3b7962877b3dca72d4bc680

  • SHA1

    6afbead59663d8d3f2f822812eb20ca76b5419de

  • SHA256

    388495b6b0227395e714e6a54dc60747068ba5a637f70b590a007ae5a5d022f2

  • SHA512

    18edf00ec55f087db195c62b2ffef636acc281d0d93c02652a329758b0d8deaf8d9d0cc95bf89ff4cb082e7290cf1240c221e97bca60b4b815b009a132671fc5

  • SSDEEP

    6144:ibX7PN1hCw66b+X0RjtdgOPAUvgkNRgdgOPAUvgkG:ib7FMUngEiM2gEif

Score
10/10
persistence

Malware Config

Targets

    • Target

      cb64c36ae3b7962877b3dca72d4bc680_NEIKI

    • Size

      390KB

    • MD5

      cb64c36ae3b7962877b3dca72d4bc680

    • SHA1

      6afbead59663d8d3f2f822812eb20ca76b5419de

    • SHA256

      388495b6b0227395e714e6a54dc60747068ba5a637f70b590a007ae5a5d022f2

    • SHA512

      18edf00ec55f087db195c62b2ffef636acc281d0d93c02652a329758b0d8deaf8d9d0cc95bf89ff4cb082e7290cf1240c221e97bca60b4b815b009a132671fc5

    • SSDEEP

      6144:ibX7PN1hCw66b+X0RjtdgOPAUvgkNRgdgOPAUvgkG:ib7FMUngEiM2gEif

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks