Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

de52337be7...KI.exe

windows7-x64

10

de52337be7...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de52337be70b8457b20e141132033ef0_NEIKI

  • Size

    208KB

  • Sample

    240508-fwfbbafb33

  • MD5

    de52337be70b8457b20e141132033ef0

  • SHA1

    166ac709bd12bc202c4e66c84a1ce99f11c6d2aa

  • SHA256

    0446c1fb54f65ac39fff8208e5446dec031051b9722d3be6d07e81af95a58d1a

  • SHA512

    5739e599a577bd0df2509699779497bd9b25f356fe728df041fe6c30c75c7343917877490fe3ae30edf6a3eafd470c6d1887727d719627ee4f5ee96d6f385727

  • SSDEEP

    3072:dRyauIn8yNSDQF+vR5AMz6+oXO56hKpi9poF5aY6+oocpGHHQnNJuIb:L5VNx+vR5AM++Eu6QnFw5+0pU8b

Score
10/10
persistence

Malware Config

Targets

    • Target

      de52337be70b8457b20e141132033ef0_NEIKI

    • Size

      208KB

    • MD5

      de52337be70b8457b20e141132033ef0

    • SHA1

      166ac709bd12bc202c4e66c84a1ce99f11c6d2aa

    • SHA256

      0446c1fb54f65ac39fff8208e5446dec031051b9722d3be6d07e81af95a58d1a

    • SHA512

      5739e599a577bd0df2509699779497bd9b25f356fe728df041fe6c30c75c7343917877490fe3ae30edf6a3eafd470c6d1887727d719627ee4f5ee96d6f385727

    • SSDEEP

      3072:dRyauIn8yNSDQF+vR5AMz6+oXO56hKpi9poF5aY6+oocpGHHQnNJuIb:L5VNx+vR5AM++Eu6QnFw5+0pU8b

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks