Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e4f5efa9e9...KI.exe

windows7-x64

10

e4f5efa9e9...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e4f5efa9e91df4d88aa36a9173b4e7e0_NEIKI

  • Size

    96KB

  • Sample

    240508-f8ynesfh39

  • MD5

    e4f5efa9e91df4d88aa36a9173b4e7e0

  • SHA1

    2b015b481d4b536a092cb93070ecc3ca4b370dd5

  • SHA256

    47aef6d71351981008d9a93e7b9e63f45a663c3a93cacfbcb3fdd13274a26e2e

  • SHA512

    750b83af4345722a6e2025627bdf27edfa01ecf3df235e3f0515eb2ec94f7674720324281291985579f00fe94af023840014a815d1f78e90ad0c2e9283b2571e

  • SSDEEP

    1536:DEwCPVAOwZ4B9fXp0ZhF1cnwP2LV7RZObZUUWaegPYA:Dn0n5N0ZhzGVClUUWae

Score
10/10
persistence

Malware Config

Targets

    • Target

      e4f5efa9e91df4d88aa36a9173b4e7e0_NEIKI

    • Size

      96KB

    • MD5

      e4f5efa9e91df4d88aa36a9173b4e7e0

    • SHA1

      2b015b481d4b536a092cb93070ecc3ca4b370dd5

    • SHA256

      47aef6d71351981008d9a93e7b9e63f45a663c3a93cacfbcb3fdd13274a26e2e

    • SHA512

      750b83af4345722a6e2025627bdf27edfa01ecf3df235e3f0515eb2ec94f7674720324281291985579f00fe94af023840014a815d1f78e90ad0c2e9283b2571e

    • SSDEEP

      1536:DEwCPVAOwZ4B9fXp0ZhF1cnwP2LV7RZObZUUWaegPYA:Dn0n5N0ZhzGVClUUWae

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks