Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

180003673e...cs.exe

windows7-x64

10

180003673e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    180003673efe224306dbcce2f81357b0_NeikiAnalytics

  • Size

    432KB

  • Sample

    240510-17kqdsff89

  • MD5

    180003673efe224306dbcce2f81357b0

  • SHA1

    bf0ef914b48b1f38b0ed42941945af802e2da48f

  • SHA256

    4f324fb4329039a1156384c6fd4a74887a071371d24661a5894a32da95be78c4

  • SHA512

    6d6c42c6a861549ff1b19bb9af852142ffd9594bbeb8190ad35cd3a10dfd0ccac932a1efbdaea9e358ae59e3d872a1611569c20af43f27c8ac0efc20ae0b46b3

  • SSDEEP

    6144:a1VzdIgi71nAv/szQRzf4Zj3JVyN/Y53fZ6ZsVb7v:YVzdInSssRWjPy9Y53B6A7v

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      180003673efe224306dbcce2f81357b0_NeikiAnalytics

    • Size

      432KB

    • MD5

      180003673efe224306dbcce2f81357b0

    • SHA1

      bf0ef914b48b1f38b0ed42941945af802e2da48f

    • SHA256

      4f324fb4329039a1156384c6fd4a74887a071371d24661a5894a32da95be78c4

    • SHA512

      6d6c42c6a861549ff1b19bb9af852142ffd9594bbeb8190ad35cd3a10dfd0ccac932a1efbdaea9e358ae59e3d872a1611569c20af43f27c8ac0efc20ae0b46b3

    • SSDEEP

      6144:a1VzdIgi71nAv/szQRzf4Zj3JVyN/Y53fZ6ZsVb7v:YVzdInSssRWjPy9Y53B6A7v

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks