Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
24fd54db7bc727d0e43d18e328edd670_NEIKI
-
Size
1.9MB
-
Sample
240508-ycqbaaed32
-
MD5
24fd54db7bc727d0e43d18e328edd670
-
SHA1
6ef6b8438c7d5b42437702f720f22a112f76ec4f
-
SHA256
8d7f6b53e831b0260030049e8e040854beca571bc99ef4f5c3b3c48fc8c3cb20
-
SHA512
43027e5f205b80605c345114d0d585f7a168cf6bf27e5422ca28b9eb2e345b20bf2133b4d6375a0947cf9e59e67bb87c592691b92b9b9f6a5af81de2250abc17
-
SSDEEP
49152:CaSHFaZRBEYyqmS2DiHPKQgmZUnaUgpC7jvha51N:CaSHFaZRBEYyqmS2DiHPKQgmZ0aUgUjY
Behavioral task
behavioral1
Sample
24fd54db7bc727d0e43d18e328edd670_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24fd54db7bc727d0e43d18e328edd670_NEIKI.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
24fd54db7bc727d0e43d18e328edd670_NEIKI
-
Size
1.9MB
-
MD5
24fd54db7bc727d0e43d18e328edd670
-
SHA1
6ef6b8438c7d5b42437702f720f22a112f76ec4f
-
SHA256
8d7f6b53e831b0260030049e8e040854beca571bc99ef4f5c3b3c48fc8c3cb20
-
SHA512
43027e5f205b80605c345114d0d585f7a168cf6bf27e5422ca28b9eb2e345b20bf2133b4d6375a0947cf9e59e67bb87c592691b92b9b9f6a5af81de2250abc17
-
SSDEEP
49152:CaSHFaZRBEYyqmS2DiHPKQgmZUnaUgpC7jvha51N:CaSHFaZRBEYyqmS2DiHPKQgmZ0aUgUjY
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-