Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

fda576d9ae...KI.exe

windows7-x64

10

fda576d9ae...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fda576d9aeb375e3b5f027f9e35bb800_NEIKI

  • Size

    303KB

  • Sample

    240508-hk1h8afh6z

  • MD5

    fda576d9aeb375e3b5f027f9e35bb800

  • SHA1

    8d933089ccae211d56bc076b39224d1d3f698cca

  • SHA256

    4c51c287b6fa3bbd7f2b78f316742c7da1fb7e4de5b1094ae3a1b5738038940b

  • SHA512

    047dc8a6c3e5d0f8eb858b4348709822475143607ed9e9595ecb3afdbbc9ea6f12c6b81b1ddc5e75194e805b5252d83f8d59d869ffb4a264f0c094e370b69c93

  • SSDEEP

    6144:83bj+VtXh+FsIAQ5CPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m34:yyx+P3FHRFbeE8mo

Score
10/10
persistence

Malware Config

Targets

    • Target

      fda576d9aeb375e3b5f027f9e35bb800_NEIKI

    • Size

      303KB

    • MD5

      fda576d9aeb375e3b5f027f9e35bb800

    • SHA1

      8d933089ccae211d56bc076b39224d1d3f698cca

    • SHA256

      4c51c287b6fa3bbd7f2b78f316742c7da1fb7e4de5b1094ae3a1b5738038940b

    • SHA512

      047dc8a6c3e5d0f8eb858b4348709822475143607ed9e9595ecb3afdbbc9ea6f12c6b81b1ddc5e75194e805b5252d83f8d59d869ffb4a264f0c094e370b69c93

    • SSDEEP

      6144:83bj+VtXh+FsIAQ5CPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m34:yyx+P3FHRFbeE8mo

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks