Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

bab81d4a7a...KI.exe

windows7-x64

10

bab81d4a7a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bab81d4a7acefebe3551122f4a24f8b0_NEIKI

  • Size

    896KB

  • Sample

    240509-bp1w8aad7v

  • MD5

    bab81d4a7acefebe3551122f4a24f8b0

  • SHA1

    f2d65972cab54edbd2fca32934a6a8f9484cf47d

  • SHA256

    f5f9287d2d0aa6cf18bad82be0535cf206a9358a8417c24cf0018aad03ee5355

  • SHA512

    8ad371a49d3b2b608dfccb83797573098202ca8ea216be8dd3c85a9cc04a3816d01cd827b3c6151bef21499dc5a45607841d801d518e7b70ae47e0554411e4d0

  • SSDEEP

    12288:UbO4KFMusMH0QiRLsR4P377a20R01F50+5:CxKILX3a20R0v50+5

Score
10/10
persistence

Malware Config

Targets

    • Target

      bab81d4a7acefebe3551122f4a24f8b0_NEIKI

    • Size

      896KB

    • MD5

      bab81d4a7acefebe3551122f4a24f8b0

    • SHA1

      f2d65972cab54edbd2fca32934a6a8f9484cf47d

    • SHA256

      f5f9287d2d0aa6cf18bad82be0535cf206a9358a8417c24cf0018aad03ee5355

    • SHA512

      8ad371a49d3b2b608dfccb83797573098202ca8ea216be8dd3c85a9cc04a3816d01cd827b3c6151bef21499dc5a45607841d801d518e7b70ae47e0554411e4d0

    • SSDEEP

      12288:UbO4KFMusMH0QiRLsR4P377a20R01F50+5:CxKILX3a20R0v50+5

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks