Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

21cc78e294...cs.exe

windows7-x64

10

21cc78e294...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21cc78e294f0b0df7fcc1b3a0745d4c0_NeikiAnalytics

  • Size

    483KB

  • Sample

    240509-3nndaadg2x

  • MD5

    21cc78e294f0b0df7fcc1b3a0745d4c0

  • SHA1

    dfd46cb8796922eab821a30230113872921d6d85

  • SHA256

    9d76495c2d5be45f553f7ba3d2e17ff6f2620217552ccaec60acc0399530656d

  • SHA512

    140c5af3fdb916c8facfaf7a6711889419feafde875055efcac44fdba69f2d70ab38487dba97b84d66cd2126bee1f2808cade262ce257927155b1db8f01f28f8

  • SSDEEP

    12288:tLNtY5vARMSG0dhvARM/3ARMSG0dhvARMoHG:tLNtY5wdhcdhMHG

Score
10/10
persistence

Malware Config

Targets

    • Target

      21cc78e294f0b0df7fcc1b3a0745d4c0_NeikiAnalytics

    • Size

      483KB

    • MD5

      21cc78e294f0b0df7fcc1b3a0745d4c0

    • SHA1

      dfd46cb8796922eab821a30230113872921d6d85

    • SHA256

      9d76495c2d5be45f553f7ba3d2e17ff6f2620217552ccaec60acc0399530656d

    • SHA512

      140c5af3fdb916c8facfaf7a6711889419feafde875055efcac44fdba69f2d70ab38487dba97b84d66cd2126bee1f2808cade262ce257927155b1db8f01f28f8

    • SSDEEP

      12288:tLNtY5vARMSG0dhvARM/3ARMSG0dhvARMoHG:tLNtY5wdhcdhMHG

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks