Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
10/05/2024, 07:17
General
-
Target
9df55a89bf7d1f9204aa86d46bc76c40_NeikiAnalytics.exe
-
Size
223KB
-
MD5
9df55a89bf7d1f9204aa86d46bc76c40
-
SHA1
b919725198a359bdd8d5301d3a2eb522fa85bd5f
-
SHA256
969d0266fc8540369499be81010ef8ffc928d9b188ea866e165435a14b460d7c
-
SHA512
995ffe19c8171188413260ba158f30ee5595aa9923f61cdc380a8aa73be7b13ccc3ec9500fd27916b72e54821d20651c142549255dcb148a24f3dd7df94daaf2
-
SSDEEP
3072:OhpcW0zxK6hgveEQloO1t6+S9LsZF9h2+NNILxRRNyy5An6jD4vmoIjueXVihP:Ev09K6h//mWo+SqZF9A+vULyyUUogWP
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of UnmapMainImage 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9df55a89bf7d1f9204aa86d46bc76c40_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\9df55a89bf7d1f9204aa86d46bc76c40_NeikiAnalytics.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: RenamesItself
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\9df55a89bf7d1f9204aa86d46bc76c40_NeikiAnalytics.exeC:\Users\Admin\AppData\Local\Temp\9df55a89bf7d1f9204aa86d46bc76c40_NeikiAnalytics.exe2⤵
- Deletes itself
- Executes dropped EXE
- Suspicious use of UnmapMainImage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
223KB
MD53b62dfb151a644e91e3c4c92d6625076
SHA183633ebc8528e95c301274e705e6f3cf34786d3b
SHA256d1c4abfcde57be44f1c9d1b486cde8ec52df042e5fc59fa7532361101e240940
SHA51258fb48508af00267800d6c2bd4cf9625751846c072a5ffddb2b028b8de738ad3b0b59fb2014fe77a499853d36853c370b0428f2584d6cb47512dcb1d274e8a0f
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
280KB
-
Filesize
104KB
-
Filesize
280KB
-
Filesize
280KB