Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

95aa43310f...KI.exe

windows7-x64

3

95aa43310f...KI.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    134s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/05/2024, 11:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    95aa43310fb095c657cde317a87dba00_NEIKI.exe

  • Size

    2.6MB

  • MD5

    95aa43310fb095c657cde317a87dba00

  • SHA1

    30011a1c3e943974835f709736ea939a17d6dfb8

  • SHA256

    edd23bb87ae54fe126e17c62a64a83d04d09c2eee03fb9cd02a8e38aade22174

  • SHA512

    131646d48e56881e732d5fca3802bd6505dd3777ef7fc97731f9e94d1870d3e47680503af2386282cd62d7ade81cb9653a1b2ddb4a358f9215377a41d5bf32a2

  • SSDEEP

    24576:oWWfwjN9w+dxWv0onnvvWP47e87x5RxViuhSHQixDDUj1lzFZE6OouvNZsT/aO:FWY5d20oA8TRiPniGt3vHsT

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 12 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\95aa43310fb095c657cde317a87dba00_NEIKI.exe
    "C:\Users\Admin\AppData\Local\Temp\95aa43310fb095c657cde317a87dba00_NEIKI.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:1352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads