Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c8d7159606...KI.exe

windows7-x64

10

c8d7159606...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8d7159606d19ca3674fcdc9fe6e6a50_NEIKI

  • Size

    398KB

  • Sample

    240509-cjdeeafc26

  • MD5

    c8d7159606d19ca3674fcdc9fe6e6a50

  • SHA1

    4548dee0c95191959af1598bdcdfee380e99907a

  • SHA256

    70297848752170e8e7eda7cd15e215538eebef3aba91bc66248b2933ce8e0d73

  • SHA512

    44a5d5c862d75968dd0f6d0dbf53d54c7e6f143d08d0f8c1e51ce7026ef6b78fe8075b39d165c4989c7eec31d18abbbcb0b101157553982dc0749e2a295da8e4

  • SSDEEP

    12288:1JhE5u6t3XGCByvNv54B9f01ZmHByvNv5imipWf0Aq:1JhE5u6t3XGpvr4B9f01ZmQvrimipWfY

Score
10/10
persistence

Malware Config

Targets

    • Target

      c8d7159606d19ca3674fcdc9fe6e6a50_NEIKI

    • Size

      398KB

    • MD5

      c8d7159606d19ca3674fcdc9fe6e6a50

    • SHA1

      4548dee0c95191959af1598bdcdfee380e99907a

    • SHA256

      70297848752170e8e7eda7cd15e215538eebef3aba91bc66248b2933ce8e0d73

    • SHA512

      44a5d5c862d75968dd0f6d0dbf53d54c7e6f143d08d0f8c1e51ce7026ef6b78fe8075b39d165c4989c7eec31d18abbbcb0b101157553982dc0749e2a295da8e4

    • SSDEEP

      12288:1JhE5u6t3XGCByvNv54B9f01ZmHByvNv5imipWf0Aq:1JhE5u6t3XGpvr4B9f01ZmQvrimipWfY

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks