Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

df7a7c9a9a...KI.exe

windows7-x64

10

df7a7c9a9a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df7a7c9a9a42184f81da73724e08c680_NEIKI

  • Size

    488KB

  • Sample

    240508-r3mjrahe5x

  • MD5

    df7a7c9a9a42184f81da73724e08c680

  • SHA1

    7a6f19f9ff455bf91950e97beceaf5e5a3434e4d

  • SHA256

    3ead3de5f9ac94d54b79a851d68081875dc9c17285a52da7033e3780f6a56679

  • SHA512

    68ae8319b17cf79a569fda49a4088a3595cc2c04a01eec960b75c8c4fc570fddc242899225e0c9681fd8c409e18f5b6e45d2318dc4ff07aef94c1ce3ebc400d1

  • SSDEEP

    6144:fNFs3hvBRoBn/TNId/1fon/T2oI0YokOsfY7Uon2KO:fNq3hvaNIVy2oIvPKiKO

Score
10/10
persistence

Malware Config

Targets

    • Target

      df7a7c9a9a42184f81da73724e08c680_NEIKI

    • Size

      488KB

    • MD5

      df7a7c9a9a42184f81da73724e08c680

    • SHA1

      7a6f19f9ff455bf91950e97beceaf5e5a3434e4d

    • SHA256

      3ead3de5f9ac94d54b79a851d68081875dc9c17285a52da7033e3780f6a56679

    • SHA512

      68ae8319b17cf79a569fda49a4088a3595cc2c04a01eec960b75c8c4fc570fddc242899225e0c9681fd8c409e18f5b6e45d2318dc4ff07aef94c1ce3ebc400d1

    • SSDEEP

      6144:fNFs3hvBRoBn/TNId/1fon/T2oI0YokOsfY7Uon2KO:fNq3hvaNIVy2oIvPKiKO

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks