Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e59fb9d9b2...KI.exe

windows7-x64

10

e59fb9d9b2...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e59fb9d9b25e0a06913643c7bd250cf0_NEIKI

  • Size

    96KB

  • Sample

    240508-shh69sac4w

  • MD5

    e59fb9d9b25e0a06913643c7bd250cf0

  • SHA1

    afcbd96ecc4967c3d816b087a3c8f96faf19f61b

  • SHA256

    11735a7e0e268558e47bf5d293871c6795a1d1247b13bffd873ce1c0fb80653a

  • SHA512

    aa788c5433b587fe8b4900ec085ce93d6c4403bb63c93c5b28b93c1b79b5272d5bf7c1d9a82b11bde6f5c6d7d99b3ad36e6d5ab6a6bfb671608b23ff5c36adf0

  • SSDEEP

    1536:niLmXp7nub4tuTgC3kUYEA62DhyXz1zs9UAIwmdbStZPduV9jojTIvjrH:nNU4sTVHKyDpmUWWStZPd69jc0vf

Score
10/10
persistence

Malware Config

Targets

    • Target

      e59fb9d9b25e0a06913643c7bd250cf0_NEIKI

    • Size

      96KB

    • MD5

      e59fb9d9b25e0a06913643c7bd250cf0

    • SHA1

      afcbd96ecc4967c3d816b087a3c8f96faf19f61b

    • SHA256

      11735a7e0e268558e47bf5d293871c6795a1d1247b13bffd873ce1c0fb80653a

    • SHA512

      aa788c5433b587fe8b4900ec085ce93d6c4403bb63c93c5b28b93c1b79b5272d5bf7c1d9a82b11bde6f5c6d7d99b3ad36e6d5ab6a6bfb671608b23ff5c36adf0

    • SSDEEP

      1536:niLmXp7nub4tuTgC3kUYEA62DhyXz1zs9UAIwmdbStZPduV9jojTIvjrH:nNU4sTVHKyDpmUWWStZPd69jc0vf

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks