Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
212ad48783f5d894386a5172672de1d0_NEIKI
-
Size
576KB
-
Sample
240508-j15csadc92
-
MD5
212ad48783f5d894386a5172672de1d0
-
SHA1
5c547a6a92db7c3ca3d6382711a7662efab53beb
-
SHA256
cc1879bbd8f4c99007961c1d9dda24a57d10d4cba0edeb2b4734e709259d6cb7
-
SHA512
5060a0b3e251f478e6cab07145ff606395c681652d0f80f23ef927aeecd04847a853a9442a3ee4abf0a1ee0ae677bcf94829f38740909015ff01685447b691da
-
SSDEEP
12288:PmWhND9yJz+b1FcMLmp2ATTSsdxmWhND9yJz+b1FcMLmpG:PmUNJyJqb1FcMap2ATT5rmUNJyJqb1Fl
Static task
static1
Behavioral task
behavioral1
Sample
212ad48783f5d894386a5172672de1d0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
212ad48783f5d894386a5172672de1d0_NEIKI.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
212ad48783f5d894386a5172672de1d0_NEIKI
-
Size
576KB
-
MD5
212ad48783f5d894386a5172672de1d0
-
SHA1
5c547a6a92db7c3ca3d6382711a7662efab53beb
-
SHA256
cc1879bbd8f4c99007961c1d9dda24a57d10d4cba0edeb2b4734e709259d6cb7
-
SHA512
5060a0b3e251f478e6cab07145ff606395c681652d0f80f23ef927aeecd04847a853a9442a3ee4abf0a1ee0ae677bcf94829f38740909015ff01685447b691da
-
SSDEEP
12288:PmWhND9yJz+b1FcMLmp2ATTSsdxmWhND9yJz+b1FcMLmpG:PmUNJyJqb1FcMap2ATT5rmUNJyJqb1Fl
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies WinLogon
-