Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2473a88729...KI.exe

windows7-x64

10

2473a88729...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2473a88729a0a22d309cf72beb862140_NEIKI

  • Size

    64KB

  • Sample

    240508-j5y2kaba5w

  • MD5

    2473a88729a0a22d309cf72beb862140

  • SHA1

    c900cec6b91a4025e3897e9aed235729bd5d3e6e

  • SHA256

    458aee154afd4df4908dd3c198204e21354d21da66db4e5323209e283b1e508b

  • SHA512

    a78c8c1218ce91043a793808c75592d9a7ae64ea1aea90cd9df9fd0fd065614746851a670d3c3fee17cc31a7d067b418259f5c15d056a3b9a37bb41ee54ce04d

  • SSDEEP

    1536:TBc6VD/C2zIJTvcYd60z4OTExx9eXUwXfzwv:TBNtsvu4Pzwv

Score
10/10
persistence

Malware Config

Targets

    • Target

      2473a88729a0a22d309cf72beb862140_NEIKI

    • Size

      64KB

    • MD5

      2473a88729a0a22d309cf72beb862140

    • SHA1

      c900cec6b91a4025e3897e9aed235729bd5d3e6e

    • SHA256

      458aee154afd4df4908dd3c198204e21354d21da66db4e5323209e283b1e508b

    • SHA512

      a78c8c1218ce91043a793808c75592d9a7ae64ea1aea90cd9df9fd0fd065614746851a670d3c3fee17cc31a7d067b418259f5c15d056a3b9a37bb41ee54ce04d

    • SSDEEP

      1536:TBc6VD/C2zIJTvcYd60z4OTExx9eXUwXfzwv:TBNtsvu4Pzwv

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks