Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c4c266d800...KI.exe

windows7-x64

10

c4c266d800...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c4c266d800a2d78f025bc0dc82386280_NEIKI

  • Size

    437KB

  • Sample

    240509-b8xnxaed69

  • MD5

    c4c266d800a2d78f025bc0dc82386280

  • SHA1

    abc84fba7f1fa449d448c45c6f22163f5c97a863

  • SHA256

    ba350e00b3951290c690715c43d42a71496ae0c6da939168a246001b316e9014

  • SHA512

    a63fea75ec6cd69e14d0950b32625bc68f68ff6e19bd713043eedb8458472daba42a751f0326f203df7182a2ec7387ca3ee36808062fc654f6171870f8219e42

  • SSDEEP

    6144:W1uuiTWh3gPQ///NR5fLYG3eujPQ///NR5f23HHeMX5mKvok:wfhR/NcZ7/N+HHTX5mKvok

Score
10/10
persistence

Malware Config

Targets

    • Target

      c4c266d800a2d78f025bc0dc82386280_NEIKI

    • Size

      437KB

    • MD5

      c4c266d800a2d78f025bc0dc82386280

    • SHA1

      abc84fba7f1fa449d448c45c6f22163f5c97a863

    • SHA256

      ba350e00b3951290c690715c43d42a71496ae0c6da939168a246001b316e9014

    • SHA512

      a63fea75ec6cd69e14d0950b32625bc68f68ff6e19bd713043eedb8458472daba42a751f0326f203df7182a2ec7387ca3ee36808062fc654f6171870f8219e42

    • SSDEEP

      6144:W1uuiTWh3gPQ///NR5fLYG3eujPQ///NR5f23HHeMX5mKvok:wfhR/NcZ7/N+HHTX5mKvok

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks