Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    34b84c8cef4a522881e39da0cd344520_NeikiAnalytics

  • Size

    66KB

  • Sample

    240510-baqspsce79

  • MD5

    34b84c8cef4a522881e39da0cd344520

  • SHA1

    7af9e69f498d3dbbe7e3678249283b1fad8c44ec

  • SHA256

    fc62f285bec7f55ddbc81c54a9c463ea48b05a88fdba12155093b22d84489b07

  • SHA512

    ad9da021ae68495b47f41dcaef27660c49dc30e1fcd45010e381f5ae7b55f187de289c09669a7d410796e66aa17451abb860265eaead4aba1313bac8fa78bcea

  • SSDEEP

    1536:cOYEou5tJkkXQyWaMGLzLsxNkdEMOb2F2:5YVuikgyWF0vsXkdEMcc2

Score
7/10
upx

Malware Config

Targets

    • Target

      34b84c8cef4a522881e39da0cd344520_NeikiAnalytics

    • Size

      66KB

    • MD5

      34b84c8cef4a522881e39da0cd344520

    • SHA1

      7af9e69f498d3dbbe7e3678249283b1fad8c44ec

    • SHA256

      fc62f285bec7f55ddbc81c54a9c463ea48b05a88fdba12155093b22d84489b07

    • SHA512

      ad9da021ae68495b47f41dcaef27660c49dc30e1fcd45010e381f5ae7b55f187de289c09669a7d410796e66aa17451abb860265eaead4aba1313bac8fa78bcea

    • SSDEEP

      1536:cOYEou5tJkkXQyWaMGLzLsxNkdEMOb2F2:5YVuikgyWF0vsXkdEMcc2

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks