Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

fc3b9772ce...KI.exe

windows7-x64

10

fc3b9772ce...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc3b9772ce503e712e2914dc7e8ab3e0_NEIKI

  • Size

    96KB

  • Sample

    240508-hg5nrsfg5t

  • MD5

    fc3b9772ce503e712e2914dc7e8ab3e0

  • SHA1

    a06c67e23c465aa91c36f8460d3aa427a036b439

  • SHA256

    daf8f134624788656382481dec6ac05e6106f9157dbeac3628ba4ac10d62a2f4

  • SHA512

    9327eef647952f849c0c3ceb4b48e65976fd21c3926e39073b9aad67179958687785dc52b1c3b265410dc2ee3df1c0524e1dcd6859b0e842ecdc2fba4c953525

  • SSDEEP

    1536:BM8D5CZR5S2huSXYRXyg8gEjQldHnG251ZDycT4MEVcdZ2JVQBKoC/CKniTCvVAT:v5mDSwjYcvgVlJnZ7V4dVqZ2fQkbn1v2

Score
10/10
persistence

Malware Config

Targets

    • Target

      fc3b9772ce503e712e2914dc7e8ab3e0_NEIKI

    • Size

      96KB

    • MD5

      fc3b9772ce503e712e2914dc7e8ab3e0

    • SHA1

      a06c67e23c465aa91c36f8460d3aa427a036b439

    • SHA256

      daf8f134624788656382481dec6ac05e6106f9157dbeac3628ba4ac10d62a2f4

    • SHA512

      9327eef647952f849c0c3ceb4b48e65976fd21c3926e39073b9aad67179958687785dc52b1c3b265410dc2ee3df1c0524e1dcd6859b0e842ecdc2fba4c953525

    • SSDEEP

      1536:BM8D5CZR5S2huSXYRXyg8gEjQldHnG251ZDycT4MEVcdZ2JVQBKoC/CKniTCvVAT:v5mDSwjYcvgVlJnZ7V4dVqZ2fQkbn1v2

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks