Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

be492a07c3...KI.exe

windows7-x64

10

be492a07c3...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be492a07c311ec4d6a9ad7a647c516b0_NEIKI

  • Size

    138KB

  • Sample

    240509-byckzsba8v

  • MD5

    be492a07c311ec4d6a9ad7a647c516b0

  • SHA1

    99af3c55cf5114e6c16bd2e1f06079aa1ac70b2f

  • SHA256

    b86ac95294cf6ae8de7d4f678f3d35ec93996267488a7e45097c69257dd76dc5

  • SHA512

    ee3513851c4a44e14b2407a93d5832dd1e017138c12fa17697e0fc481c7a5c6f1f91399ce9eab64f45914a6d4397f5d97d14b89c04e18ec558e7e6771c9772f8

  • SSDEEP

    3072:gfMK3guGjXlYzgjWl+ZuzU+uwEOij4uYkg3Me5GRIwRuYkg3Me5GFKcWBuYk5:7K3guGDlYzgjWl+ZuzU+djij4hVEhVL2

Score
10/10
persistence

Malware Config

Targets

    • Target

      be492a07c311ec4d6a9ad7a647c516b0_NEIKI

    • Size

      138KB

    • MD5

      be492a07c311ec4d6a9ad7a647c516b0

    • SHA1

      99af3c55cf5114e6c16bd2e1f06079aa1ac70b2f

    • SHA256

      b86ac95294cf6ae8de7d4f678f3d35ec93996267488a7e45097c69257dd76dc5

    • SHA512

      ee3513851c4a44e14b2407a93d5832dd1e017138c12fa17697e0fc481c7a5c6f1f91399ce9eab64f45914a6d4397f5d97d14b89c04e18ec558e7e6771c9772f8

    • SSDEEP

      3072:gfMK3guGjXlYzgjWl+ZuzU+uwEOij4uYkg3Me5GRIwRuYkg3Me5GFKcWBuYk5:7K3guGDlYzgjWl+ZuzU+djij4hVEhVL2

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks