Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

5d9e2a1876...KI.exe

windows7-x64

7

5d9e2a1876...KI.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d9e2a18762478df882f8487d367f770_NEIKI

  • Size

    625KB

  • Sample

    240508-madzpahh65

  • MD5

    5d9e2a18762478df882f8487d367f770

  • SHA1

    856c39c76cf7a3fd29208017f992502a6df2f606

  • SHA256

    988dbef9d775d8471d2b01b7dbfdb9c7621723bd9bc652e2b7b885a3ed18d524

  • SHA512

    0ad314e9020c793028762c1a3ef06cd7a423f7bb4225020968e53cd4d4ddf48ebe43c1c3821e26f95ea33e95615541b1378a33ad8fc27673a1ccef186465bea6

  • SSDEEP

    12288:T2vFqXCRQSjMU3O5s+N6NhOlFVlVsTot16+DrgAPs4F2Y7YJba2EUYhsp+yQRi/o:ioSRQ5UOOU62FBnO+E222YJbNEUQKGOb

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      5d9e2a18762478df882f8487d367f770_NEIKI

    • Size

      625KB

    • MD5

      5d9e2a18762478df882f8487d367f770

    • SHA1

      856c39c76cf7a3fd29208017f992502a6df2f606

    • SHA256

      988dbef9d775d8471d2b01b7dbfdb9c7621723bd9bc652e2b7b885a3ed18d524

    • SHA512

      0ad314e9020c793028762c1a3ef06cd7a423f7bb4225020968e53cd4d4ddf48ebe43c1c3821e26f95ea33e95615541b1378a33ad8fc27673a1ccef186465bea6

    • SSDEEP

      12288:T2vFqXCRQSjMU3O5s+N6NhOlFVlVsTot16+DrgAPs4F2Y7YJba2EUYhsp+yQRi/o:ioSRQ5UOOU62FBnO+E222YJbNEUQKGOb

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks