Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

a30316e596...KI.exe

windows7-x64

10

a30316e596...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a30316e5962dca158a5bb0fc33216180_NEIKI

  • Size

    264KB

  • Sample

    240508-pbn76abg5v

  • MD5

    a30316e5962dca158a5bb0fc33216180

  • SHA1

    f04604a2dfeff057faa36616a4b6a51a61a0ba31

  • SHA256

    7bd07859fb5e5c1be03fde08f04b5a7c78cddc32372f01d004c84a9f1e48b6c1

  • SHA512

    653303495a299aa4c6fd0d7bfe1a49463525969d267954022a2f387918ec42db0f1d6ac1e44cff0159f989d2f645fb32403f2cdc4c9342cf25ef19810434885f

  • SSDEEP

    6144:XBtOXTqfpui6yYPaIGck72siBTQtpui6yYPaIGckv:xtOjUpV6yYPc2siBTspV6yYPo

Score
10/10
persistence

Malware Config

Targets

    • Target

      a30316e5962dca158a5bb0fc33216180_NEIKI

    • Size

      264KB

    • MD5

      a30316e5962dca158a5bb0fc33216180

    • SHA1

      f04604a2dfeff057faa36616a4b6a51a61a0ba31

    • SHA256

      7bd07859fb5e5c1be03fde08f04b5a7c78cddc32372f01d004c84a9f1e48b6c1

    • SHA512

      653303495a299aa4c6fd0d7bfe1a49463525969d267954022a2f387918ec42db0f1d6ac1e44cff0159f989d2f645fb32403f2cdc4c9342cf25ef19810434885f

    • SSDEEP

      6144:XBtOXTqfpui6yYPaIGck72siBTQtpui6yYPaIGckv:xtOjUpV6yYPc2siBTspV6yYPo

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks